Per-category redaction counts. Useful for two things: telling the control
plane what kinds of secrets the bundle had (which is itself a diagnostic
signal — “this log has JWTs in it, suggesting auth attempts”), and for
trust-page reporting (“we redacted 12,847 secrets last month”).