feat : instrument data access audit logs (#2054)

* feat: instrument applet:subject:view audit events

* feat: instrument applet:answer:view audit events

* feat: instrument applet:answer:assessment:view + applet:answer:identifier:view audit events

* feat: instrument applet:answer:note:view audit events

* feat: instrument applet:answer:export audit events

* fix: log submit_ids in curious_submit_id instead of curious_answer_id

* feat: log curious_subject_id wherever available for applet:subject:view

* feat: log curious_answer_id wherever available for applet:answer:* events

The branch already logged curious_answer_id for the answer:* endpoints
that have an answer_id in the URL. This commit covers the remaining
endpoints where answer_ids are reachable from the response or query
filters

* fix: move post-fetch processing inside try in applet_answers_export

* feat: address PR review comments - additional curious_* fields

* fix: use subjects_by_applet.get(applet_id) in error path and log curious_answer_id in submission assessment retrieve

Author: sricharan-varanasi

src/apps/answers/api.py

@@ -79,6 +79,7 @@ async def map_users_and_notes(
             result.append(
                 AnswerNoteDetail(
                     id=note.id,
+                    answer_id=note.answer_id,
                     user=dict(
                         id=note_user.id,
                         first_name=note_user.first_name,

src/apps/answers/crud/notes.py

@@ -458,6 +458,7 @@ class Reviewer(InternalModel):
 
 class AnswerReview(InternalModel):
     id: uuid.UUID
+    answer_id: uuid.UUID
     reviewer_public_key: str | None = None
     answer: str | None = None
     item_ids: Annotated[list[str], Field(default_factory=list)]
@@ -519,6 +520,7 @@ class NoteOwner(InternalModel):
 
 class AnswerNoteDetail(InternalModel):
     id: uuid.UUID
+    answer_id: uuid.UUID
     user: NoteOwner
     note: str
     created_at: datetime.datetime

src/apps/answers/domain/answers.py

@@ -2121,6 +2121,7 @@ async def _prepare_answer_reviews(
             results.append(
                 AnswerReview(
                     id=schema.id,
+                    answer_id=schema.answer_id,
                     reviewer_public_key=schema.user_public_key if can_view else None,
                     answer=schema.answer if can_view else None,
                     item_ids=schema.item_ids,