fix: redact deployment inputs from diagnostics

[alongubkin]

Summary

• redact stored stack input IDs and values from DeploymentRecord debug output
• redact user-provided environment variable names and values from the same diagnostic boundary
• preserve operational fields needed to diagnose deployment state

This is a focused safety prerequisite for ALIEN-914. It does not add secret persistence or local input injection.

Validation

• cargo fmt --check --package alien-manager
• cargo test -p alien-manager deployment_debug_redacts_sensitive_values --lib
• git diff --check

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge, with no actionable correctness, security, or repository-rule violations identified.

Summary

This PR strengthens the diagnostic boundary for stored deployments without changing serialization or deployment behavior.

• Redacts stack input identifiers and values from DeploymentRecord debug output.
• Redacts user-provided environment-variable names and values while preserving whether the optional field is present.
• Adds a regression test confirming representative secrets and identifiers are absent from formatted diagnostics.

_{Reviews (1) · Last reviewed commit: "fix: redact deployment inputs from diagn..."}