Capture request/response bodies for audit-log via pre/post-function

Body capture lives in dedicated audit-log-body-capture(-bindings).yaml
files, separate from audit-log.yaml itself, so they can be dropped
without touching the base logging plugin (degrades gracefully to
metadata-only via nil custom_fields). Response body captured in
body_filter (chunk-accumulated) rather than the log phase, which
cannot call kong.response.get_raw_body() directly.

kong/kustomization.yaml

@@ -9,6 +9,8 @@ resources:
   - rest/rate-limiting.yaml
   - rest/proxy-cache.yaml
   - rest/audit-log.yaml
+  - rest/audit-log-body-capture.yaml
+  - rest/audit-log-body-capture-bindings.yaml
   - rest/pluginbindings.yaml
   - mcp/service.yaml
   - mcp/routes.yaml
@@ -16,4 +18,6 @@ resources:
   - mcp/ai-mcp-proxy.yaml
   - mcp/openid-connect.yaml
   - mcp/audit-log.yaml
+  - mcp/audit-log-body-capture.yaml
+  - mcp/audit-log-body-capture-bindings.yaml
   - mcp/pluginbindings.yaml