CVE-2026-48786: Fleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint

The target search endpoint (POST /api/latest/fleet/targets) returned team enroll secrets and full team configuration, including credential-bearing agent options, to observer-class users. Other team-facing endpoints mask these fields for observers; the target search endpoint did not apply the same sanitization.