Beyond Last Click: Making Sense of Customer Journey Attribution in a Privacy-First World