chore(security): set visibility to private, sanitize internal Tailscale IPs, and drop qa_evidence tracking

freight: QLoRA pilot complete - 98.1% holdout CE improvement, adapter on private HF repo

feat(freight): dataset pipeline — clean, dedup, redact, split, version

fix: require auth only when FLOW_API_KEY is explicitly set