MaskEnvVarValue performs blind substring replacement instead of exact value matching while doing sync/diff

[shivaygupta-dotcom]

When DECK_ environment variables are set, the masking feature performs blind substring replacement instead of exact value matching. This causes every occurrence of the environment variable value to be replaced with [masked] throughout the output as a substring, including inside UUIDs, ports, and other values.

more details
https://kongstrong.slack.com/archives/C04349E4KRC/p1778884332073549