PII (email/SSN) persisted unredacted in the session JSON transcript export

## Summary `agent/redact.py` masks secrets (API keys, tokens, credentials, Authorization headers, D