Add separate pii_denylist to EventScrubber and run it always

[sl0thentr0py]

Implements https:/getsentry/rfcs/blob/main/text/0062-controlling-pii-and-credentials-in-sd-ks.md#optional-c-add-separate-security-denylist
since we have enough users asking for it now

closes #2032

[codecov]

❌ 4 Tests Failed:

Tests completed	Failed	Passed	Skipped
11482	4	11478	1635

View the top 3 failed tests by shortest run time

tests.integrations.aws_lambda.test_aws test_init_error[python3.11]

Stack Traces | 11.8s run time

.../integrations/aws_lambda/test_aws.py:334: in test_init_error
    (event,) = envelope_items
E   ValueError: not enough values to unpack (expected 1, got 0)

tests.integrations.aws_lambda.test_aws test_init_error[python3.12]

Stack Traces | 12.8s run time

.../integrations/aws_lambda/test_aws.py:334: in test_init_error
    (event,) = envelope_items
E   ValueError: not enough values to unpack (expected 1, got 0)

tests.integrations.aws_lambda.test_aws test_init_error[python3.9]

Stack Traces | 17s run time

.../integrations/aws_lambda/test_aws.py:334: in test_init_error
    (event,) = envelope_items
E   ValueError: not enough values to unpack (expected 1, got 0)

To view individual test run time comparison to the main branch, go to the Test Analytics Dashboard

[sentrivana]

LGTM

Please also add to docs

[sl0thentr0py]

docs here
getsentry/sentry-docs#11154