Based on the git diff provided, here's a concise and descriptive commit message:

feat: add passkey authentication and enhance user preferences

- Add passkey login security event type with fingerprint icon
- Include request and site context in email confirmation for backend
- Add user_id exact match filter to prevent incorrect user lookups
- Enable PATCH method for updating user preferences via API
- Add moderation_preferences support to user settings
- Optimize ticket queries with select_related and prefetch_related

This commit introduces passkey authentication tracking, improves user
profile filtering accuracy, and extends the preferences API to support
updates. Query optimizations reduce database hits for ticket listings.

backend/apps/moderation/serializers.py

@@ -100,6 +100,10 @@ class EditSubmissionSerializer(serializers.ModelSerializer):
             "claimed_at",
             "created_at",
             "time_since_created",
+            # Photo fields (used when submission_type="PHOTO")
+            "photo",
+            "caption",
+            "date_taken",
         ]
         read_only_fields = [
             "id",
@@ -1062,3 +1066,45 @@ class PhotoSubmissionSerializer(serializers.ModelSerializer):
         else:
             minutes = diff.seconds // 60
             return f"{minutes} minutes ago"
+
+
+# ============================================================================
+# Moderation Audit Log Serializers
+# ============================================================================
+
+
+class ModerationAuditLogSerializer(serializers.ModelSerializer):
+    """Serializer for moderation audit logs."""
+
+    moderator = UserBasicSerializer(read_only=True)
+    moderator_username = serializers.CharField(source="moderator.username", read_only=True, allow_null=True)
+    submission_content_type = serializers.CharField(source="submission.content_type.model", read_only=True)
+    action_display = serializers.CharField(source="get_action_display", read_only=True)
+
+    class Meta:
+        from .models import ModerationAuditLog
+
+        model = ModerationAuditLog
+        fields = [
+            "id",
+            "submission",
+            "submission_content_type",
+            "moderator",
+            "moderator_username",
+            "action",
+            "action_display",
+            "previous_status",
+            "new_status",
+            "notes",
+            "is_system_action",
+            "is_test_data",
+            "created_at",
+        ]
+        read_only_fields = [
+            "id",
+            "created_at",
+            "moderator",
+            "moderator_username",
+            "submission_content_type",
+            "action_display",
+        ]