Show audit ui based on created date, not modified

Audits get modified for administrative reasons, not limited to marking
them as approved or migrating from an OTM1 instance.

Don't show modified date, it doesn't reflect the true history of the
object correctly. Show created date.
I did a quick grep for `\.updated`, `updated=`, `updated__`, `"updated"`, and `'updated'`.  It doesn't look like we're incorrectly using it instead of `created` anywhere else