fix(api): wrap audit log writes inside their parent transactions

Prevents mutations from committing without an audit trail if the
auditLog.create call fails after the main write already succeeded.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

packages/api/src/router/allocation/assignment-mutations.ts

@@ -302,16 +302,16 @@ export async function batchUpdateAllocationStatusWithAudit(
       ).allocation),
     );
 
-    return updatedAllocations;
-  });
+    await tx.auditLog.create({
+      data: {
+        entityType: "Allocation",
+        entityId: input.ids.join(","),
+        action: "UPDATE",
+        changes: { after: { status: input.status, ids: input.ids } },
+      },
+    });
 
-  await db.auditLog.create({
-    data: {
-      entityType: "Allocation",
-      entityId: input.ids.join(","),
-      action: "UPDATE",
-      changes: { after: { status: input.status, ids: input.ids } },
-    },
+    return updatedAllocations;
   });
 
   return updated;