Activity log table definition.

message is a plain column here because its crypto can't be expressed as a static transform. The write key is resolved at runtime (owner public key when configured, else the env key). The read key is the per-request private key. logActivity and decryptLogRows own those two steps.