Q114: goal audits use the org's own auditor model and see pointers, not the executor's account

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

src/shared/domain.ts

@@ -45,6 +45,9 @@ export interface OrganizationRecord {
   executionMode: string;
   autoApproveHires: boolean;
   reviewDeliverables: boolean;
+  /** The provider and model that audit goal completion, never the executor's own; null until the board sets them. */
+  auditProviderId: string | null;
+  auditModelId: string | null;
   createdAt: string;
 }