Log redaction

Automatically stripping secrets, tokens, and sensitive values out of execution logs and telemetry before they are published or displayed to viewers.

grounded in: Commit 0ffb3b9 'pipeline: sanitized execution-activity feed generator (router/autopost/self-improve/deploys)' and gen_activity.py — the public activity feed is explicitly SANITIZED before display.