Add IdentityRestoredEvent audit log entry (restored)

[kayjoosten]

Problem

After PR #635, an identity that is forgotten and later restored still ends the audit log on deprovisioned. Identity::restore() emits IdentityRestoredEvent, but Middleware does not map that event to an audit-log action and the event is also absent from AuditLogRepository::$secondFactorEvents.

Why this matters

For a live identity the terminal audit-log entry can read as if the account is still gone, because there is no matching restored entry after the earlier deprovisioned one.

Follow-up work

• add IdentityRestoredEvent::class => "restored" to the audit-log action map in Middleware
• include IdentityRestoredEvent in the audit-log query allowlist so the entry is visible to RA(A)s
• add/update tests for projector + repository behavior
• add the RA-side translation alongside the work already started in Add translation for deprovisioned audit log action Stepup-RA#531

References

• PR Show deprovisioning event and date in the audit log #635
• Add translation for deprovisioned audit log action Stepup-RA#531