Project Admin / Project Viewer API access for audit events of a certain project

Currently, API access to audit events (`audits` table) is limited to users with the sitewide role of `Administrator`.

It could be useful to expose the audit events in the scope of a project to `Project Admin`s and `Project Viewer`s of that project, starting with the API, perhaps eventually used in a presentation on the Frontend.

One thing that this would enable is the processing/representation of submission deletions. Currently when one deletes a submission, I think there is no way for a Project Admin/Viewer to uncover any trace of that action, even if they did it themselves.