Decision Logs and InvestigationEnforceAuth ingests OPA decision logs so security and compliance teams can answer why was this denied? without SSH and grep across clusters.