PII detection — SSNs (validated), credit cards (Luhn), emails, crypto addresses, API keys, JWTs, private keys