Add tests for sensitive-data filtering

[ashrafee-dev]

Goal

Protect the privacy filter with regression tests before changing its patterns.

Acceptance criteria

• Cover email addresses, phone numbers, card-like numbers, SSNs, and long numeric IDs.
• Confirm replacements remove the original sensitive values.
• Include at least one mixed-content example.