v4.2: Add support for redacting sensitive property values in change logs

Introduce a mechanism to log that a property has changed without storing its actual value.
This allows auditing the fact of a change (e.g., a password update) while preventing
sensitive data (like password hashes) from being stored in log history.