Introduce `RedactionRules` across the core library, CLI, HTTP API, and
default configs so callers can enable or disable individual finding kinds.

This changes the default behavior to keep domain and person detection off
unless explicitly enabled, and updates docs, tests, and OpenAPI schema to
match.

Signed-off-by: Cloudiful <bunnies-spender.0h@icloud.com>