Problem

Telemetry was capturing command output, error messages, and HTTP payloads as flag values, and workflow_language was missing from some command events (especially failures).

Solution

Flag Sanitization (core fix)

• Added garbage detection: New looksLikeUnintendedContent() redacts any flag value that doesn't look like a real CLI argument — catches >256 char values, newlines, JSON blobs ({/[), and output signatures (panic:, traceback, goroutine, HTTP/1.x, "error", <html).
• Closed flag-name gaps: Added changeset-file to full-redact list, project-root to path-redact (basename only).
• Backstop on args: Same guard applied to positional arguments for defense-in-depth.

Workflow Language Attachment

• convert command: Now captures detected workflow language (was computing it but discarding).
• deploy & simulate: Moved WASM language assignment earlier — now fires as soon as WASM path is known, before read/fetch/compile operations that can fail. Ensures language is recorded even on failure.