fix(doctor): refuse a redacted bundle when custom rules fail to load

EnsureRedactionConfigured warns and falls back to the built-in layers when settings or the redactor packs directory fail to load, which hooks rely on. A bundle leaves the machine, so record the failure and have the redacted bundle refuse instead; --raw still works.