feat(logging): replace all print() with structured logger calls, add MCP audit middleware and sanitized access log formatter