Ensure sensitive details are never logged via CallStack

[confused-Techie]

Requirements

• Filling out the template is required.

• All new code requires tests to ensure against regressions.

  • However, if your PR contains zero code changes, feel free to select the checkmark below to indicate so.

• Have you ran tests against this code?

• This PR contains zero code changes.

Description of the Change

This PR adds much more logic to ensure sensitive details are never logged via CallStack.

[meadowsys]

apparently i need to write a comment in this comment box to finish the rest, huh, didn't know that! :p

except the part about tokens being embedded within larger strings, everything looks good!

[meadowsys]

actually thought... there are likely purpose built libraries that search/mask strings for all sorts of tokens, perhaps that would be better for us to build CallStack on top of?

[confused-Techie]

@meadowsys I do like your idea for finding something that can be used here, which I was able to find hide-secrets on NPM, which does essentially what we already are doing with less flexibility (as far as I can tell), so maybe we can just grab the extra list of items they check for and add them here.

The other thing I'd be interested in is finding the source of whatever GitHub Actions uses for this exact same purpose, since I know GitHub has a partner program with a much longer list, so I wonder if that code is public

[confused-Techie]

@meadowsys I've gone ahead and implemented your suggestions if there's anything else you spot