This cover R27 Description: GET /api/logs endpoint (admin-only) + table UI with level/message/timestamp