From Detection to Production: A PII-Safe Pipeline in Python and DuckDB

Part 3 of 3 — assembling everything into a runnable pipeline: raw zone, pseudonymized curated zone, vault, role-based serving, GDPR erasure, and the CI test that catches leaks.