Redact secrets from worker diagnostics
Diagnostic bundles must mask credential-like environment values while retaining the keys operators need for support.
- Acceptance
- Known secret patterns are redacted in text and JSON output.
- Execution
- Linux worker in the team’s private build network.