feat: add complete audit log download helper

[yummybomb]

Summary

• add auditLogs.download for complete exports while retaining exportChunk for low-level access
• use gzip-compressed JSON Lines for high-level downloads; raw format selection remains on exportChunk
• verify checksums and reject missing, stalled, or cyclic cursor chains before writing each chunk
• preserve standard SDK HTTP retry behavior and make transfer retries configurable
• support browser-safe checksum verification, file handles, async progress, and documented partial outputs

Testing

• ./scripts/lint
• ./scripts/test
• ./scripts/build
• browser bundle with esbuild

---

Note

Medium Risk
New client-side export path with integrity and pagination rules; failures can leave partial files (documented), but existing list/exportChunk APIs are unchanged.

Overview
Adds auditLogs.download for full gzip JSONL audit exports to any writable destination, while exportChunk stays available for single-chunk access.

The new helper pages via X-Next-Cursor, validates X-Has-More, X-Row-Count, and X-Content-Sha256 before writing, detects repeated cursors, and retries transient transfer failures with configurable maxTransferRetries. It supports onProgress, abort signals, body read timeouts, and partial-write handling for destinations like Node file handles. AuditLogDownloadError and related types are exported from the package entrypoint.

^{Reviewed by Cursor Bugbot for commit ec64cbd. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 0779ce9. Configure here.}