Log denied access attempts to centralized security table

Denied access events go unlogged, leaving teams blind to incidents. Log each denied attempt to a central record so teams can triage and meet audit needs same day.