PII redaction for customer support: redact before retrieval, not after logging

Where card numbers and personal data actually leak in an AI support stack, and why redaction has to run before content reaches a retrieval index, not after.