feat: add privacy-safe server diagnostics

package.json

@@ -14,6 +14,7 @@
     "db:migrate": "node --env-file=.env --import tsx control-plane/src/migrate.ts",
     "admin": "node --env-file=.env --import tsx control-plane/src/admin-cli.ts",
     "data:retention": "node --env-file=.env --import tsx control-plane/src/retention.ts",
+    "diagnose:server": "sh infra/diagnose-server.sh",
     "check": "tsc --noEmit -p tsconfig.json",
     "check:repo": "node --test tools/repository-hygiene.test.mjs",
     "test:control-plane": "node --test --import tsx control-plane/test/*.test.ts",