Pseudonymize embedded references, not just object keys
Pseudonymizing a private evidence object's key does not pseudonymize its body. A copied media URL or storage path may embed the raw subject or call identifier even when the surrounding record uses keyed hashes. Inspect every joined reference before persisting it; store a keyed re…