Measure discovery without surveillance

Local analytics retain redacted event categories and avoid full IP addresses, credentials, and raw user-agent or referrer values.