AI provider account disables usage alerting or audit logging

Detects cloud app account activity indicating that usage alerting or audit logging has been disabled, which could allow attackers to hide token jacking or unauthorized AI resource consumption.