Update application acquisition source and create audit log entry

Your API key records often arrive without acquisition details, forcing product and account teams to research origins manually. Record source and an audit row so teams can act on provenance same day.