Diagnostics

ackit diagnostics --json | jq .profile
ackit diagnostics bundle --out ./ackit-diag.zip --redact-check

Schema ackit.diagnostics.v1, deterministic bundle-manifest.json with sha256 + redaction count, 5-secret [REDACTED] proof.