audit_log.md: clarify grep usage for syslog

---

• Close #270 (closed)
• Changes should be cherry-picked to 24.2: yes
• Staging: https://docs.binary.picodata.io/picodata/at/audit_log_fix/