git log for your infrastructure — tamper-evident host snapshots, diffable history, and d…