chore: init vm-cc compliance scaffold

config/redaction.yaml

@@ -0,0 +1,21 @@
+# Redaction policy for evidence before reporting/proofs.
+# Define fields to drop or mask by source.
+
+vm_skills:
+  drop:
+    - "*.png"  # example if screenshots are present
+  mask:
+    - "**/secrets/**"
+
+ops:
+  drop: []
+  mask:
+    - "**/private_keys/**"
+
+vm_ledger:
+  drop: []
+  mask: []
+
+vm_mcp:
+  drop: []
+  mask: []