Create audit log rows for manual role changes

Your manual repository role changes lack a single audit record and slow investigations. It logs each permission change to a central sheet so reviewers can act same day.