docs: fix name of join token audit event

Makes the docs match the code from #28769

docs/pages/reference/audit.mdx

@@ -148,7 +148,7 @@ read [Exporting Teleport Audit Events](../management/export-audit-events.mdx).
 | user.login | A user logged into web UI or via tsh. The following fields will be logged: `{"user": "[email protected]", "method": "local"}` . |
 | app.session.start | A user accessed an application |
 | app.session.chunk | A record of activity during an app session |
-| join_token.created | A new join token has been created. Adds the following fields: `{"roles": ["Node", "Db"], "join_method": "token"}` |
+| join_token.create | A new join token has been created. Adds the following fields: `{"roles": ["Node", "Db"], "join_method": "token"}` |
 
 ## Recorded sessions