Coverage calculation for this build was skipped because it contains the same data as another build. See this build for the coverage details.
If you feel that something is wrong here, please contact support.

fix(audit): add token admin auth and address code review findings

- add Admin field to TokenConfig for API token admin privileges
- add IsTokenAdmin method to Auth for token-based admin checks
- add ExtractToken helper to consolidate token extraction logic
- update AuditAuth interface and HandleQuery for Bearer/X-Auth-Token auth
- consolidate duplicate maskToken functions (use auth.go version)
- remove baseURL field duplication from web.AuditHandler
- add tests: unauthenticated request, JSON parse error, store error
- add e2e test for direct /audit URL access by non-admin
- update README and stash-auth-example.yml with admin flag docs
- update CLAUDE.md to include "create" in audit actions