Show IP address on API-generated activity log entries

Problem:

Activity log entries created via the API don't include the IP address the request came from. The web UI shows the IP address for browser-based actions, but API actions don't carry it in the response.

Why it matters:

Admins can't tell where an API action originated from, which limits security auditing and troubleshooting for API key misuse or unexpected automation behavior.