[loitly]

Ticket: https://jira.ipac.caltech.edu/browse/FIREFLY-2157

Some logging paths printed credentials in full. All logged request/response headers now go through HttpServices.sanitizeHeader().

Fixed leaks:

• ConcurrentDownload request headers and the HttpServices failure CURL CMD now go through sanitizeHeader().
• AuthHeader also redacts schemeless Authorization, Proxy-Authorization, X-Api-Key, Api-Key, X-Auth-Token.
• HttpServicesTest runs against a local HTTP server instead of httpbin, plus a test that the failure log has no token.

Test: https://firefly-2157-redact-values-from-logs.irsakubedev.ipac.caltech.edu/suit/

• Upload a table from URL https://data-int.lsst.cloud/test/abc (404).
• kubectl logs -n irsa-dev deploy/firefly-2157-redact-values-from-logs-suit -c suit | grep -A1 "test/abc"
• Expect headers sent: Authorization: Bearer [redacted], ...

[aventura121]

Hi loi, looks good in general. A couple of things deferred to you on how to address.

• Claude found the unguarded sanitizeHeader calls in URLDownload.java will throw and break the standalone app's ability to auto-update. (java.lang.NoClassDefFoundError).
• Also, it looks like cookies can still leak if there's a failed request, if you want to take a look. Not a blocker for this change but may be worth adding while you're here, up to you.

[loitly]

@aventura121 Thanks for the review. I was on the fence about the cookie changes, but I went ahead and incorporated your suggestions. I also found an issue with the Job Monitor's Control column width that affected suit and fixed it in this PR.