refactor(audit): type-safe enums, expanded coverage, and crash-safe logging

Replace magic strings with AuditAction/AuditStatus enums across all consumers,
add logAuditWithCurrentUser() convenience wrapper, extend audit coverage to
data import, result export, app update, and ERP credentials operations, and
harden crash handlers with try/catch to prevent audit failures from cascading.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/main/services/database/data-importer.ts

@@ -10,6 +10,8 @@
  */
 
 import { createLogger } from '../logger'
+import { logAuditWithCurrentUser } from '../logger/audit-logger'
+import { AuditAction, AuditStatus } from '../../types/audit.types'
 import { DiscreteMaterialPlanDAO, type MaterialPlanRecord } from './discrete-material-plan-dao'
 
 const log = createLogger('DataImportService')
@@ -148,6 +150,20 @@ export class DataImportService {
       }
     }
 
+    // Audit log: DATA_IMPORT
+    logAuditWithCurrentUser(
+      AuditAction.DATA_IMPORT,
+      'MATERIAL_PLAN',
+      result.success ? AuditStatus.SUCCESS : AuditStatus.FAILURE,
+      {
+        recordsRead: result.recordsRead,
+        recordsDeleted: result.recordsDeleted,
+        recordsImported: result.recordsImported,
+        uniqueSourceNumbers: result.uniqueSourceNumbers,
+        errorCount: result.errors.length
+      }
+    )
+
     return result
   }