feat(core-audit): admin tRPC procedure for eraseSubject

Adds auditProcedure (adminOnly middleware + defineErrorMiddleware([])) in
core-audit/src/integrations/api/procedures.ts. Adds createAuditRouter that
captures an IAuditLog and exposes a single eraseSubject mutation with zod
input validation. Non-admins receive FORBIDDEN. Barrel re-exports
pseudonymize, createAuditErasureHook, createAuditRouter, auditRouter,
AuditRouter, auditProcedure, AdminTrpcUser. Adds AUDIT_PSEUDONYM_SALT to
turbo.json globalEnv to clear lint warnings.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

packages/core-audit/src/index.ts

@@ -7,3 +7,18 @@ export { MultiSinkAuditLog } from "./multi-sink-audit-log";
 export { auditLogsCollection } from "./audit-logs-collection";
 export { bindAudit, type BindAuditOpts } from "./di/bind-audit";
 export { AUDIT_SYMBOLS } from "./di/symbols";
+// Phase 3 — GDPR erasure
+export { pseudonymize } from "./pseudonymize";
+export {
+  createAuditErasureHook,
+  type AuditErasureHookOpts,
+} from "./hooks/audit-erasure-hook";
+export {
+  createAuditRouter,
+  auditRouter,
+  type AuditRouter,
+} from "./integrations/api/router";
+export {
+  auditProcedure,
+  type AdminTrpcUser,
+} from "./integrations/api/procedures";