Platform review round 2: audit logging migration, nav unification, DB indexes, and UI polish

- Migrate ~41 inline audit log calls to shared logAudit() utility across all routers
- Add transaction-aware prisma parameter to logAudit() for atomic operations
- Unify jury/mentor/observer navigation into shared RoleNav component
- Add composite DB indexes (Evaluation, GracePeriod, AuditLog) for query performance
- Fix profile page: consolidate dual save buttons, proper useEffect initialization
- Enhance auth error page with MOPC branding and navigation
- Improve observer dashboard with prominent read-only badge
- Fix DI-3: fetch projects before bulk status update for accurate notifications
- Remove unused aiBoost field from smart-assignment scoring
- Add shared image-upload utility and structured logger module

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/server/routers/learningResource.ts

@@ -6,6 +6,7 @@ import {
   adminProcedure,
 } from '../trpc'
 import { getPresignedUrl } from '@/lib/minio'
+import { logAudit } from '../utils/audit'
 
 // Bucket for learning resources
 export const LEARNING_BUCKET = 'mopc-learning'
@@ -312,16 +313,15 @@ export const learningResourceRouter = router({
       })
 
       // Audit log
-      await ctx.prisma.auditLog.create({
-        data: {
-          userId: ctx.user.id,
-          action: 'CREATE',
-          entityType: 'LearningResource',
-          entityId: resource.id,
-          detailsJson: { title: input.title, resourceType: input.resourceType },
-          ipAddress: ctx.ip,
-          userAgent: ctx.userAgent,
-        },
+      await logAudit({
+        prisma: ctx.prisma,
+        userId: ctx.user.id,
+        action: 'CREATE',
+        entityType: 'LearningResource',
+        entityId: resource.id,
+        detailsJson: { title: input.title, resourceType: input.resourceType },
+        ipAddress: ctx.ip,
+        userAgent: ctx.userAgent,
       })
 
       return resource
@@ -359,16 +359,15 @@ export const learningResourceRouter = router({
       })
 
       // Audit log
-      await ctx.prisma.auditLog.create({
-        data: {
-          userId: ctx.user.id,
-          action: 'UPDATE',
-          entityType: 'LearningResource',
-          entityId: id,
-          detailsJson: data,
-          ipAddress: ctx.ip,
-          userAgent: ctx.userAgent,
-        },
+      await logAudit({
+        prisma: ctx.prisma,
+        userId: ctx.user.id,
+        action: 'UPDATE',
+        entityType: 'LearningResource',
+        entityId: id,
+        detailsJson: data,
+        ipAddress: ctx.ip,
+        userAgent: ctx.userAgent,
       })
 
       return resource
@@ -385,16 +384,15 @@ export const learningResourceRouter = router({
       })
 
       // Audit log
-      await ctx.prisma.auditLog.create({
-        data: {
-          userId: ctx.user.id,
-          action: 'DELETE',
-          entityType: 'LearningResource',
-          entityId: input.id,
-          detailsJson: { title: resource.title },
-          ipAddress: ctx.ip,
-          userAgent: ctx.userAgent,
-        },
+      await logAudit({
+        prisma: ctx.prisma,
+        userId: ctx.user.id,
+        action: 'DELETE',
+        entityType: 'LearningResource',
+        entityId: input.id,
+        detailsJson: { title: resource.title },
+        ipAddress: ctx.ip,
+        userAgent: ctx.userAgent,
       })
 
       return resource
@@ -480,15 +478,14 @@ export const learningResourceRouter = router({
       )
 
       // Audit log
-      await ctx.prisma.auditLog.create({
-        data: {
-          userId: ctx.user.id,
-          action: 'REORDER',
-          entityType: 'LearningResource',
-          detailsJson: { count: input.items.length },
-          ipAddress: ctx.ip,
-          userAgent: ctx.userAgent,
-        },
+      await logAudit({
+        prisma: ctx.prisma,
+        userId: ctx.user.id,
+        action: 'REORDER',
+        entityType: 'LearningResource',
+        detailsJson: { count: input.items.length },
+        ipAddress: ctx.ip,
+        userAgent: ctx.userAgent,
       })
 
       return { success: true }