feat(studio): deploy security audit worker

[man4ish]

PR-B0 — Deploy Security Audit Worker

Summary

Makes the existing security-audit worker part of the OmniBioAI Studio
runtime and supplies its required audit database configuration.

Changes

• add security-audit-worker to development Compose
• configure AUDIT_DATABASE_URL
• create omnibioai_audit during database initialization
• configure the audit database URL for release Compose

Prerequisite

PR-B0.1 (#3) fixed the Redis read-timeout crash loop in the security-audit
worker and was merged before this PR was resumed.

Validation

• Docker Compose configuration passes
• security-audit API starts successfully
• security-audit worker starts successfully
• real Redis → worker → MySQL flow validated
• worker remains stable across idle Redis read cycles
• worker restart count remains zero
• subsequent audit events are consumed and persisted
• duplicate event IDs were checked
• git diff --check passes

Scope

This PR does NOT:

• implement Interactions
• add an Interaction table/API/UI
• modify authentication/session behavior
• modify Control Center
• modify API Gateway
• change the audit event contract

Known follow-ups

The previously identified API Gateway audit-event schema mismatch remains
outside this PR and should be handled separately.

The stale published security-audit image/release-tag issue is also outside
this PR.