feat: auto-detect unconfigured PPI — warns before sending

Scans outbound messages AFTER all substitutions for personal data
the user forgot to configure:

- Private/public IP addresses (skips 127.0.0.1, 8.8.8.8, etc.)
- MAC addresses
- Street addresses ("123 Main St")
- GPS coordinates
- Dates (possible DOBs)
- EIN/tax IDs
- Home directory paths not caught by smart patterns
- Shell prompts (user@host)
- Git remotes (reveals username/org)
- Environment variable assignments (HOME=, USER=, etc.)

Shows a floating dark warning banner (top-right, auto-dismisses
after 15s) listing each detected item with its type, value, and
hint. Skips values already in the user's identity config.

Also shows PPI warnings in the popup Test tab and adds toggle
in Options to disable auto-detect.

https://claude.ai/code/session_01Dvgwe7XMoSxnWXkih8p1Cw

src/options/options.js

@@ -14,6 +14,7 @@ document.addEventListener('DOMContentLoaded', async () => {
   // Apply settings to UI
   $('#showHighlights').checked = settings.showHighlights || false;
   $('#secretScanning').checked = settings.secretScanning !== false;
+  $('#autoDetect').checked = settings.autoDetect !== false;
   $('#maxLogEntries').value = settings.maxLogEntries || 200;
 
   renderMappings();
@@ -41,6 +42,10 @@ document.addEventListener('DOMContentLoaded', async () => {
     await Storage.saveSettings({ secretScanning: e.target.checked });
   });
 
+  $('#autoDetect').addEventListener('change', async (e) => {
+    await Storage.saveSettings({ autoDetect: e.target.checked });
+  });
+
   $('#maxLogEntries').addEventListener('change', async (e) => {
     await Storage.saveSettings({ maxLogEntries: parseInt(e.target.value, 10) || 200 });
   });