Add log export for audit logs and SCIM events

Route audit-log and SCIM-event exports through export_jobs with typed
arguments, an iam BuildAndUploadExport/SendExportEmail implementation,
and a concurrent export-job worker with stale recovery. Stream JSONL via
page.WalkAll into S3, and expose the request flow on console, connect,
MCP, and CLI.

Co-authored-by: Bryan Frimin <bryan@getprobo.com>
Signed-off-by: Sacha Al Himdani <sacha@probo.com>

pkg/server/api/console/v1/graphql/audit_log.graphql

@@ -68,3 +68,19 @@ type AuditLogEntryEdge {
     cursor: CursorKey!
     node: AuditLogEntry!
 }
+
+extend type Mutation {
+    requestAuditLogExport(
+        input: RequestAuditLogExportInput!
+    ): RequestAuditLogExportPayload!
+}
+
+input RequestAuditLogExportInput {
+    organizationId: ID!
+    fromTime: Datetime!
+    toTime: Datetime!
+}
+
+type RequestAuditLogExportPayload {
+    exportJobId: ID!
+}