docs: mark audit-log core done in roadmap (#184)

ROADMAP.md

@@ -189,7 +189,9 @@ Order = user-visible value first; each ships with backend + UI + tests.
    - [ ] Paid-share `price_points` wired to the ledger + purchase/resume-ticket flow
 5. **System extensions** — activity/audit log, site announcements, node selection, report-abuse queue (fixes #3480, #3479 IP whitelist). See §1.3a.
    - [x] PR #144 — task `creator_ip` capture with CIDR-capable admin filter (#115 OSS half), group remote-download quotas per count + per volume (#16), yt-dlp downloader provider (#88), progressive image preview (#113), v3 migrator `DatabaseURL` passthrough (#42)
-   - [ ] `activity_event` entity + per-file Activity dialog + admin event feed/detail; site announcement modal + dismissal; group `allowed_nodes` + task `target_node`; `abuse_report` + admin queue + share context-menu Report entry
+   - [x] `activity_event` entity (immutable, tx-aware, actor+IP+CID) + per-file Activity dialog + admin `/admin/event` feed + per-type enablement + retention cron (#184)
+   - [ ] Event coverage remainder: share-link viewed, version ops, thumb-gen, metadata/view, mount, WebDAV acct, payment, account link/nick/avatar/password/2FA/passkey, abuse, OAuth grant
+   - [ ] site announcement modal + dismissal; group `allowed_nodes` + task `target_node`; `abuse_report` + admin queue + share context-menu Report entry
 
 ## 5. Phase C — security + quality