Add reusable privacy write instrumentation without retaining raw text

A TypeScript monorepo needed to extend privacy instrumentation across additional write paths while preserving a default-discard invariant: raw user text may be inspected in memory by synchronous moderation, but only sanitized text can be persisted or queued for asynchronous review. The package-level helper also needed to avoid depending on app-layer database code.