createRecallDiagnostics closure privacy

Chose request-local SHA-256 sets inside createRecallDiagnostics() over logging recall values or fingerprints because even hashed identities can enable correlation and disclose private retrieval behavior. Emit only bounded aggregate counters, stop after 64 rounds, and clear input, result, pair, and coverage sets on finish(); fingerprints and recall content must never leave the closure.