I want to be able to track changes in Web & DNS filter profiles (e.g. someone changes a category from block to allow)

The Web & DNS filter profiles are recorded in the device's dataprint