Credit repair is legal - but the rules matter. Here's what federal law actually says, what companies can and can't do, and how to protect yourself.