Edit only redaction.pii.enabled when configuring PII

configure --local --redact-pii decoded the target file into the settings struct and saved the whole struct back. A missing local file decodes with "enabled": true, so the new local file re-enabled a repo the project file disabled. Edit the raw JSON instead, touching only redaction.pii.enabled.