Implementation: Custom roles audit trail #588

Implement the audit model defined in the ADR resulting from the "ADR: Custom roles audit model" issue: record the lifecycle events for custom roles, written in the same transaction as the change they describe, with tests covering each event type. Expose the history via the API only if the ADR decides to.