Module formatter

Audit log formatters for SIEM ingestion.

Four formats are supported:

• Jsonl (default): pass-through JSON
• Cef: ArcSight Common Event Format
• Leef: IBM QRadar Log Event Extended Format
• Ecs: Elastic Common Schema (JSON)

The trait has been replaced by an enum (AuditFormat) + a single inherent format() method. This avoids the per-record Box<dyn> indirection in the CLI’s export path and lets the compiler inline the format selection.

Enums

AuditFormat

Stable identifier for an audit format (e.g. "jsonl", "cef").