scrub the secrets

[nathaniel-may]

Description

Uses the same strategy that we use today via LogBook just via a simple function call. I decided not to use the built-in scrubbing from structlog because it's made to scrub named fields, which we are not doing here. We only have the values.

Checklist

• I have signed the CLA
• I have run this code in development and it appears to resolve the stated issue
• This PR includes tests, or tests are not required/relevant for this PR
• I have updated the CHANGELOG.md and added information about my change

[emmyoop]

Looks good - FYI there's a commit in the main branch ahead of when this branched off that uses scrubbing in exceptions.py

[emmyoop]

Tests also import SECRET_ENV_PREFIX to build secrets so it should probably stay a var.

[nathaniel-may]

Thanks for the heads up @emmyoop. It looks like the commit in exceptions.py is going to work just fine with the new system. I also agree that since the var is used in tests I should be referencing it as well. We can move it out of the old logger module later.