Build redact-jsonl CLI that masks secret values in NDJSON

Build a dependency-free Node.js CLI named redact-jsonl that streams UTF-8 NDJSON from a file path or stdin to stdout, redacting values whose object keys match a configurable case-insensitive denylist. Default keys: password, token, secret, apiKey, authorization. Recurse through objects and arrays without mutating key names; replace matched values with the literal string [REDACTED]. Accept --keys comma-separated names and --input path, with --help. Emit exactly one compact JSON output line per nonblank valid input line in input order. Blank lines are ignored. On malformed JSON, report input line number to stderr, exit 1, and write no output for that bad line or any later line; prior valid lines may already have streamed. Invalid options or unreadable input exit 2 with a useful stderr message. Never print original secret values in errors. Include Node built-in tests for nested arrays, mixed key casing, custom keys, whitespace, malformed lines after valid lines, unreadable input, and stdin; README with usage examples. Do not use network access or modify input files.