Logging commands in an audit log in the database

As a related task to #3333, we may want a way to keep an audit log of administrative operations in the database itself. This will ensure that these records are persisted as soon as the actions are taken, and could allow a retention policy that was longer than the normal log retention policy to help separate the concerns of ordinary operational logging from critical security records.

Start by reading the related issue #3333 and mapping how administrative operations and ordinary logs are currently handled. Define the scope for persisting administrative actions in the database, including how records remain available beyond normal log retention and how a retention policy would work.

Written by the indexing model from the issue text.