From Vulnerability to Vault: Mitigating Risks for Confidential Documents in AR/VR