fix(redact,cli): mask credentials in every log line, silence httpx request urls

tests/test_auth_query_token.py

@@ -61,7 +61,7 @@ async def test_bootstrap_entry_can_carry_a_scope() -> None:
 
 
 def test_access_log_filter_masks_query_tokens() -> None:
-    from beaver_gateway.cli import ScrubQueryTokens
+    from beaver_gateway.core.redact import RedactFilter
 
     record = logging.LogRecord(
         "uvicorn.access",
@@ -72,6 +72,6 @@ def test_access_log_filter_masks_query_tokens() -> None:
         ("1.2.3.4:1", "POST", "/hooks/komodo?token=s3cret&x=1", "1.1", 202),
         None,
     )
-    assert ScrubQueryTokens().filter(record)
+    assert RedactFilter().filter(record)
     assert "s3cret" not in record.getMessage()
     assert "/hooks/komodo?token=<…>&x=1" in record.getMessage()