a9db7ed5a8
Mined terminal commands can carry credentials (URL userinfo, env assignments, bearer tokens). Patterns and examples are printed to the operator and can be persisted into config.yaml, so pass them through redact_sensitive_text like every other display boundary. Danger classification still sees the raw command.