security: fail-closed on secret extraction and env var leakage

fix(security): strip punctuation before slashes in URL normalization

fix(security): validate injection tier names, normalize URLs

feat(security): add output validation gate (PII, URL, blocklist)