List and query IAM activity (audit) events

Lists IAM activity/audit events for the active scope, powering the Activity page audit table: each event records the actor and their email, the action type (e.g. VM.START, IAM.ROLE_ASSIGN, IAM.TOKEN_CREATE), the affected resource, the source IP, the timestamp, and the result. This single endpoint also serves the iam.activity.search_filter_sort action: q matches actor, action, and resource text; the actor, action, and status query filters mirror the UI's "All actors" / "All action types" / "Any result" selects; sorting defaults to newest-first by at. Validation: scopeId must be an accessible scope; status must be one of SUCCESS|PENDING|FAILED; action must be a known action-type string; pagination/sort parameters must be within their documented ranges — violations map to VALIDATION_FAILED (422). Async & state: Synchronous read; no state change. The audit stream is append-only; events are immutable once recorded. Errors: 401 when unauthenticated; 403 when the caller lacks audit-read permission on the scope (reader role or above); 422 on malformed filter/pagination parameters; 500 on read-model failure. Idempotency/Concurrency: Safe, cacheable; no idempotency key required.