[Patel Namraa (Namraa310806)]

Description

Redact DEVUI_AUTH_TOKEN from the Azure deployment command before logging it.

The Azure deployment command previously included the generated DevUI authentication token directly in the command passed to the INFO-level logger. This could expose the bearer token through CI logs, Application Insights, file logs, or other centralized logging systems.

The actual command executed by Azure CLI still contains the real token; only the logged representation is redacted.

Changes

• Redact DEVUI_AUTH_TOKEN from the deployment command before logging.
• Keep the real authentication token in the command passed to Azure CLI.
• Add a regression test verifying that:
  • the real token does not appear in logs;
  • the redacted token appears in logs;
  • the real token remains in the command executed by Azure CLI.

Fixes #9116

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[Eduard van Valkenburg (eavanvalkenburg)]

Patel Namraa (@Namraa310806), thank you for the contribution. #9118 is already open for the same DevUI auth-token redaction work and covers the same deployment logging path, so we’ll continue the work there.