P3-02: audit-log.entity + service, manual logging in controller
(startSession, submitAnswer, deleteSession, review, forceEnd)
P3-03: POST batch-delete, POST batch-export endpoints + service methods
P3-04: DataSource.transaction for deleteSession + reviewAssessment,
graph state cleanup on session delete
Developer