Mask addon credentials in app task logs

[marcusquinn]

When an app is installed or updated, the app log includes lines like:

services: Setting postgresql addon config to [{"name":"CLOUDRON_POSTGRESQL_URL","value":"postgres://<user>:<password>@postgresql/<db>"},{"name":"CLOUDRON_POSTGRESQL_PASSWORD","value":"<password>"},...]
services: Setting sendmail addon config to [...{"name":"CLOUDRON_MAIL_SMTP_PASSWORD","value":"<password>"}...]

Only admins and operators can see these (including AI sessions), and they can already read the environment, so this isn't an access problem.

But app logs are what people paste into forum posts and support requests, and AI sessions logs can be mined — and these lines sit in the middle of normal startup output.

Could the values be masked in those debug lines (for example "value":"***" for passwords and URL userinfo), keeping just the variable names?

[girish]

Those credentials only work internally on the server and cannot be used from outside. But OK, we can hide them since we don't really use those lines for debugging.

[girish]

It's gone.