[feature request] enable key redaction with the @tracer.chain decorator

[mikeldking]

Since tracer decorators serialize IO automatically, sometimes it results in un-wanted capturing of things like credentials

{
    "test_setup": {
        "run_id": "run_BmrvEMsS_20250214_153051",
        "run_timestamp": "20250214-153051",
        "prompts": {
        " prompt 1 ": <redacted>, 
        " prompt 2 " : <redacted>,
        etc}
        "aws_creds": {
            "awsAccessKeyId": <redacted>,
             "awsSecretAccessKey": <redacted>,
             "awsSessionToken": <redacted>,
           }
}

The decorator should be sufficiently configurable such that you can omit certain paths in the input and output payloads. That or this should be globally configurable so that IO can be redacted appropriately via TraceConfig.