redactArgv telemetry boundary

Always pass CLI arguments through redactArgv() before every telemetry call; raw process.argv must never reach telemetry. SENSITIVE_ARGV_FLAGS includes token and auth-token, whose values become [REDACTED], because authentication secrets may otherwise be disclosed through spans, events, or logs.