feat: add serializer mixin for audit field updates

The update of the created_by and updated_by model fields in many
serializers can be simplified by extracting the logic into a mixin.