Activity log table definition.

message is a plain column here because its crypto can't be expressed as a static transform: the write key is resolved at runtime (owner public key when configured, else the env key) and the read key is the per-request private key. logActivity and decryptLogRows own those two steps.