Stage 209: route surfaces entity_id query param

infra/api/app.py

@@ -3472,6 +3472,7 @@ def create_app(db_path: Optional[str] = None,
         tenant_id: str,
         actor: Optional[str] = Query(default=None),
         action: Optional[str] = Query(default=None),
+        entity_id: Optional[str] = Query(default=None),
         limit: int = Query(100, ge=1, le=handlers.MAX_PAGE),
         offset: int = Query(0, ge=0),
         key: ApiKey = Depends(auth_dep),
@@ -3479,7 +3480,8 @@ def create_app(db_path: Optional[str] = None,
         require_tenant_access(key, tenant_id)
         require_role(key, ROLE_ADMIN)        # admin-tier audit reads
         return handlers.list_audit_logs(
-            svc, actor=actor, action=action, tenant_id=tenant_id,
+            svc, actor=actor, action=action, entity_id=entity_id,
+            tenant_id=tenant_id,
             limit=limit, offset=offset,
         )