Use DAB bulk_update auditing instead of a duplicate AWX helper, narrow caller
allowlists so logs point at serializers and scheduler, and document wiring.
Signed-off-by: Vidya Nambiar <vnambiar@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Add field-scoped audit_bulk_update_instances for bulk_update_sorted_by_id
and scheduler job_explanation batches. Expand functional and unit tests for
bulk host/workflow create and bulk update bypass logging.
Co-authored-by: Cursor <cursoragent@cursor.com>
Log Tier 1/2 bypass violations for WorkflowJobNode prompt fields stored in
char_prompts, which post_save and bulk CharField scans do not cover alone.
Co-authored-by: Cursor <cursoragent@cursor.com>
Register ORM bypass signals and AWX caller prefixes at startup, and audit
bulk host create before bulk_create.
Co-authored-by: Cursor <cursoragent@cursor.com>