Sigil: Secure, Tamper-Evident Audit Trails for AI Agents