Feature — Audit Logging

[coderkrp]

As a compliance officer,
I want detailed audit logs,
So that trading activity is traceable.

Acceptance criteria

• AC1: All API requests and their outcomes are logged in a structured (JSON) format.
• AC2: All interactions with broker APIs (requests and responses) are logged.
• AC3: Logs include a correlation_id to trace a single request through the system.
• AC4: Logs are written to a local file that is automatically rotated.
• AC5: Sensitive information (tokens, secrets) is redacted from the logs.

Definition of Done

• Code implemented in a feature/fix branch
• Unit / integration tests added or existing tests updated
• Linting passed and code builds locally
• Docs / README updated if behavior changed
• PR opened and linked (Closes #<issue-number>)
• Manual QA steps verified (if applicable)