Elevation policy events now show which rule changed

When a rule inside an elevation policy was added, removed or modified, the resulting event recorded only the number of rules the policy ended up with. Two different changes could produce identical-looking events, so the log told you a policy had been edited but not what the edit was.

Events now describe the change itself:

Rule added
— identifies the rule by name and records the full definition of what it contained.
Rule deleted
— identifies the rule by name and records the rule definitions that were removed.
Rule edited
— identifies the rule by name and surfaces what changed within it, including definitions added or removed.

Changes that loosen or tighten an elevation rule are now traceable after the fact, and a deleted rule leaves a record of what it contained rather than having to be reconstructed from memory.

Events recorded before this release keep their original level of detail.