`PII<T>` / `Secret<T>` Enforcement

These wrapper types are parsed as ordinary nominal types today. Runtime taint tracking, egress guards, and redaction transformers are planned post-1.0.