Function log_event 

pub fn log_event(event: AuditEvent)

Log a structured audit event.

Events are checked against the active filter. If accepted, they are stored in the circular in-memory buffer and optionally written to persistent storage.

Uses try_lock() with graceful degradation to avoid deadlocks when called from syscall return paths or interrupt contexts. If locks are held, the event is skipped rather than blocking.