adt/log-sanitizer

Removes sensitive data from payloads before they are logged or persisted: masking by key name, per-request secrets, card number detection.