feat: public forensic ticket event log DSL

[tom-sapletta-com]

Summary

• expose compact append-only PLOG/1 ticket and management event history through /logs.dsl.txt, /logs, and /logs/days
• rotate the public projection by UTC day and stream the existing SODL journal during first-use backfill
• record evidence and management decisions while retaining the canonical SODL audit trail
• document the grammar, redaction, retention, and API contract

Validation

• pytest -q: 368 passed, 6 skipped
• Ruff: changed Python modules pass
• git diff --check
• todo2code: 0 blocking diagnostics, z-ai/glm-5.2 via OpenRouter/Fireworks, no degraded LLM stage
• live-journal benchmark: 82 MB backfill in 1.85 s, 58 MB peak RSS

Planfile ticket: PLF-3775