Function pseudonymize 

pub fn pseudonymize(person: &str) -> String

The stable pseudonym for a person: p: + first 16 hex chars of BLAKE3_keyed(salt, normalized_person). Already-pseudonymized inputs pass through unchanged (idempotent — safe on re-tagged requests).