fix(redact): password keys get only the shared placeholder rules

Under password keys, key/value placeholder shapes such as doc fill-ins (your_token, api-token-here) can be a human-chosen password. Text and JSON key/value checks now apply them to non-password credential keys only. With goredact-only scanners the key-context pass does not catch these, so db_password=your_token leaked. Fingerprint version 11.