PRIVATE tag PII anonymization

Universal build.

Set tag 'PRIVATE' on any document to ensure the MCP server anonymizes document contents before it goes to LLM server. See readme for more details.