Warn that data connector header values are logged unmasked (#770)

The `headers` field on the create and update data connector requests
now says that header values are recorded unmasked in execution logs
(except `Authorization`) and points to `token_ids` for credentials.
Applies to 2.16, 2.17 and Preview.

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

Author: yasser-aboelgheit-intercom

descriptions/0/api.intercom.io.yaml

@@ -44629,7 +44629,8 @@ components:
           - visitors
         headers:
           type: array
-          description: HTTP headers to include in the request.
+          description: |
+            HTTP headers to include in the request. Don't put credentials such as API keys here: header values are recorded unmasked in the connector's execution logs, except `Authorization`, which is always masked. Attach a stored credential with `token_ids` instead (see [Create an auth token](/docs/references/preview/rest-api/api.intercom.io/auth-tokens/createauthtoken)). Its value is stored encrypted, masked in execution logs, and never returned.
           items:
             type: object
             properties:
@@ -44807,7 +44808,8 @@ components:
           - users
         headers:
           type: array
-          description: HTTP headers to include in the request.
+          description: |
+            HTTP headers to include in the request. Don't put credentials such as API keys here: header values are recorded unmasked in the connector's execution logs, except `Authorization`, which is always masked. Attach a stored credential with `token_ids` instead (see [Create an auth token](/docs/references/preview/rest-api/api.intercom.io/auth-tokens/createauthtoken)). Its value is stored encrypted, masked in execution logs, and never returned.
           items:
             type: object
             properties:

descriptions/2.16/api.intercom.io.yaml

@@ -30668,7 +30668,8 @@ components:
           - visitors
         headers:
           type: array
-          description: HTTP headers to include in the request.
+          description: |
+            HTTP headers to include in the request. Don't put credentials such as API keys here: header values are recorded unmasked in the connector's execution logs, except `Authorization`, which is always masked. Attach an authentication token with `token_ids` instead; its value is masked in execution logs.
           items:
             type: object
             properties:
@@ -30794,7 +30795,8 @@ components:
           - users
         headers:
           type: array
-          description: HTTP headers to include in the request.
+          description: |
+            HTTP headers to include in the request. Don't put credentials such as API keys here: header values are recorded unmasked in the connector's execution logs, except `Authorization`, which is always masked. Attach an authentication token with `token_ids` instead; its value is masked in execution logs.
           items:
             type: object
             properties:

descriptions/2.17/api.intercom.io.yaml

@@ -39366,7 +39366,8 @@ components:
           - visitors
         headers:
           type: array
-          description: HTTP headers to include in the request.
+          description: |
+            HTTP headers to include in the request. Don't put credentials such as API keys here: header values are recorded unmasked in the connector's execution logs, except `Authorization`, which is always masked. Attach an authentication token with `token_ids` instead; its value is masked in execution logs.
           items:
             type: object
             properties:
@@ -39506,7 +39507,8 @@ components:
           - users
         headers:
           type: array
-          description: HTTP headers to include in the request.
+          description: |
+            HTTP headers to include in the request. Don't put credentials such as API keys here: header values are recorded unmasked in the connector's execution logs, except `Authorization`, which is always masked. Attach an authentication token with `token_ids` instead; its value is masked in execution logs.
           items:
             type: object
             properties: