Retain infrastructure names and share/mount roots behind policy switches

Add a `retain` block to privacy_policy.json (all on by default) so assessments
show software, services, processes, tasks, shares/mounts and private peer IPs.
Values pass an identifier-pattern filter (digit runs, SSN/phone, e-mail, charset,
length, path depth). Accounts, command lines, child paths, filenames and public
peer IPs stay omitted. Linux collector and Windows PowerShell collectors updated;
tests cover retention, withholding and all-switches-off.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

tests/test_linux.py

@@ -104,7 +104,10 @@ class RegressionReviewTests(unittest.TestCase):
         data = json.loads(Path('samsara/assets/demo_inventory.json').read_text())
         data['server']['os_build'] = '١٢٣٤٥'
         data['inventory']['software'] = [{'name': 'Microsoft Visual C++ 2015-2022 Redistributable (x64)', 'version': '14.38.33135'}]
-        clean = minimize_inventory(data)
+        from samsara.core.privacy import load_privacy_policy
+        strict = load_privacy_policy()
+        strict['retain'] = {key: False for key in strict['retain']}
+        clean = minimize_inventory(data, strict)
         self.assertNotEqual(clean['server']['os_build'], '١٢٣٤٥')
         self.assertEqual(clean['inventory']['software'][0]['name'], 'Microsoft Visual C++')