Merge origin/main into fix/doctor-bundle-custom-redaction

Main now enables cobra.EnableTraverseRunHooks and moved doctor's redaction load to the root's own PreRunE, which still skips doctor subcommands. Fold EnsureRedactionConfigured into the doctor group's PersistentPreRunE after the broken-.entire report, and drop the shadowing guard test: with traversal on, a subcommand's own persistent pre-run no longer replaces the group's.