Hardware identity, OS, OTA channel, recovery actions.
Generates a redacted tarball (logs, config, hardware inventory) for the Kafu ops team. PHI is automatically stripped.