Function build_entity_map 

pub fn build_entity_map(
    log_files: &[String],
) -> Result<HashMap<String, EntityMapping>>

Build entity mappings from audit logs without writing to file. Returns HashMap of entity_id -> EntityMapping for reuse by other commands.