🛠️ Update various documentation, scripts, and configuration templates to enhance clarity, functionality, and maintainability across the project

docs/operations.md

@@ -21,3 +21,25 @@ install/verify.ps1
 ```
 
 Scheduled sync will be added on top of the same update and verify entrypoints.
+
+## Audit
+
+```bash
+resources/scripts/audit-copilot-usage.sh --days 30
+```
+
+The audit workflow is macOS-first in this iteration. It writes per-machine audit
+history under `.local/audits/<machine-id>/` in the repo checkout and keeps that
+runtime state out of git.
+
+After a run is generated, use the `review-audit-candidates` prompt in Copilot
+to work through `selection-manifest.tsv` one candidate at a time.
+
+When rows are approved, generate draft resources or staging notes with:
+
+```bash
+resources/scripts/prepare-audit-promotions.sh
+```
+
+See `docs/audit-workflow.md` for the report format, selection manifest, and
+promotion rules.