Refactor workspace app auditing to include HTTP status codes returned outside of `Issue`

@mafredri one thing we could do is have `proxyWorkspaceApp` return the reverse proxy and an error/boolean/something. That way the code can look _something_ like:

```golang
token, audit, ok := ResolveRequest(rw, r, ResolveRequestOptions{
// ....

proxy, err := s.proxyWorkspaceApp(rw, r, *token, chiPath, appurl.ApplicationURL{})

audit()
proxy.ServeHTTP(rw, r)
```

That would catch all the top level proxy errors. It is a bit of a refactor, and I am sure I am not thinking of something. However the audit log up front feels like an improvement, and we do not need to hook into the status writer.

_Originally posted by @Emyrk in https://github.com/coder/coder/pull/16801#discussion_r1985158788_