fix: redact additional keys from diagnostic data

[allenporter]

Update the list of sensitive/large data in the redacted key list.

Fixes #622

[Copilot]

Pull request overview

This PR enhances the privacy and diagnostic data handling by expanding the list of sensitive keys that are redacted from diagnostic data. The changes address issue #622 by adding 9 additional keys to prevent exposure of user identifiers and large data payloads.

• Adds 4 RRiot authentication fields (u, s, h, k) to protect user credentials
• Adds 3 large binary blob keys (image_content, map_data, raw_api_response) to reduce diagnostic data size
• Reformats the REDACT_KEYS set with inline comments for better maintainability

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The single-letter key names (u, s, h, k) are unclear without context. Consider adding a more descriptive comment explaining that these are fields from the RRiot authentication data structure, to help future maintainers understand why they need to be redacted.

For example:

# Potential identifiers
"duid",
"localKey",
"mac",
"bssid",
"sn",
"ip",
# RRiot authentication fields (from UserData.rriot)
"u",
"s",
"h",
"k",

[Copilot]

The comment states "Large binary blobs are entirely omitted" but the actual implementation replaces these values with REDACTED ("REDACTED"), not omits them. Consider updating the comment to be more accurate:

# Large binary blobs are redacted

or

# Large binary blobs

Suggested change

	# Large binary blobs are entirely omitted
	# Large binary blobs are redacted