Ticket 5 — moox/audit for Media lifecycle/attributes

[jbagsik]

What to build

Media attribute and lifecycle changes can appear in moox/audit / Activity where configured, so admins see who changed what on media records. Docs state clearly that this is not a download/access log and not file-byte integrity (hash).

Acceptance criteria

• Media is registerable with moox/audit (package or app config pattern consistent with other Moox packages).
• Creating/updating relevant auditable attributes produces an activity entry when audit is enabled.
• Documentation notes audit ≠ access log ≠ content hash.
• Test or documented verification path for “audit enabled → activity recorded”.