Hide API keys during live debugging

Blur credentials, tokens, emails, and customer IDs before sharing docs, consoles, dashboards, or admin tools.