feat: redact username in logging

[yCodeTech]

This pull request introduces a new utility function to redact the current OS username from log output and applies it where necessary to prevent leaking personally identifiable information (usernames) in logs. The main changes involve adding the redactUsername function and updating logging statements and data accessors to use it, especially when logging paths or configuration data that may contain the username.

Sensitive Data Redaction:

• Added a recursive redactUsername function in src/utils.ts to sanitize strings, arrays, objects, and Maps by replacing occurrences of the current OS username with "<redacted>".
• Updated logging in src/configuration.ts to redact the username from environment variables and language config file paths before outputting them.
• Updated ExtensionData in src/extensionData.ts to redact the username from the extensionPath property and all extension discovery paths when accessed for logging.
• Updated imports in src/extensionData.ts to include the new redactUsername utility.

Utility Improvements:

• Added the os module import in src/utils.ts to support cross-platform username detection.

[Copilot]

Pull request overview

This PR adds a reusable redaction utility to prevent leaking the current OS username in log output, and applies it to a few high-signal logging/data-access paths in the extension.

Changes:

• Added redactUsername in src/utils.ts to recursively redact usernames in strings across nested data structures.
• Updated Configuration.logDebugInfo() logging to redact usernames from environment data and language config file paths.
• Updated ExtensionData to redact usernames in extensionPath and extension discovery paths when used for logging.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.

File	Description
src/utils.ts	Introduces redactUsername utility used for recursive username redaction in log-bound data.
src/configuration.ts	Applies username redaction to debug logging of environment/config path-related data.
src/extensionData.ts	Redacts username from extension path and discovery paths exposed for logging.

[Copilot]

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated no new comments.

Suppressed comments (3)

src/logger.ts:233

• Username redaction is currently only applied to the formatted meta output (via formatMeta()), not to the main message string appended in logMessage(). This still allows usernames to leak when call sites interpolate paths directly into the message (e.g., logger.info(Loaded DEV_USER_EXTENSIONS_PATH: "${devPath}") in src/utils.ts). Consider redacting the message before appending it to the output channel (and ideally also for important() logs) so redaction is consistently applied.

			data = lines.join(",\n");
		}

		return this.redactUsername(data);
	}

src/logger.ts:299

• The warning text says "debug logs may not be redacted", but username redaction is applied to any log meta that goes through formatMeta() (including info/warn/error). The message should be accurate so users understand the scope of the redaction failure.

		this.warn("Could not determine OS username; debug logs may not be redacted before sharing.");

src/logger.ts:261

• PR description says a recursive redactUsername utility was added to src/utils.ts and applied across configuration/extension data accessors, but the implementation shown here adds redaction inside Logger instead. Please update the PR description (or align the implementation) so it accurately reflects where redaction lives and how it’s applied.

	/**
	 * Redact the OS username from a string, replacing it with `<redacted>`, to avoid leaking
	 * it into debug logs that could be shared.
	 *
	 * @param {string} text The text to redact.