Privacy-safe public journal boundary for optional Spectre extensions.
Extension records accept operational metadata only. Message bodies, addresses, provider payloads, and credentials are rejected before they reach the configured journal store.
@spec record(module(), atom(), map(), keyword()) :: :ok | {:error, term()}