[NOTICKET] fix: F-9 — redact PII in the two persisted artifacts

[NOTICKET] revert: drop F-3 user_id scoping on /charts + /traceability (lead decision)

[NOTICKET] feat: bound catalog render + blob read; scope charts/traceability; mark degraded seams

[NOTICKET] fix: split report floor from report body; scope analysis reads by user_id

fix/ check and new chart tool (#16)

/fix traceability (#15)

/fix planner and report (#13)

/feat traceability (#11)