Add structured JSON logging with pino

[EmmanuelOchaje]

Context

docs/OBSERVABILITY.md describes logging goals, but the app uses the default Nest logger.

Task

• Add nestjs-pino with request IDs and redaction of secrets

Acceptance criteria

• Authorization headers are redacted
• Log level configurable

This issue is self-contained and can be picked up independently of any other open issue.