cmek_preserve events: filter example, payload, reason codes

Expanded the Access Transparency documentation of cmek_preserve events with a filter example, an example event payload, and two preservation reason codes (policy_violation_investigation, csae_report). The documentation now also clarifies that a preservation event is written whether the preservation was initiated by a human reviewer or an automated safety pipeline. See CMEK content preservation.