fix(http): redact sensitive request config in error logs

[jasonandjay]

Fixes #327

What changed

• Stop logging raw err.response.config in HTTP helper error paths.
• Add sanitizeAxiosResponseConfig() to only keep safe fields (method, url, timeout).
• Add unit test to ensure sensitive fields like headers and auth are not exposed.

Why

The previous error logging could leak authorization material via request config dumps in logs.

---

Note

Low Risk
Low risk: limits error-log output to a small allowlist and adds a unit test; behavior changes are confined to logging and should not affect request/response handling.

Overview
Updates HTTP helper error logging to stop dumping raw Axios response.config (which may include auth/headers) and instead log a sanitized subset via new sanitizeAxiosResponseConfig().

Adds a unit test to assert only method, url, and timeout are retained and sensitive fields like headers/auth are excluded.

^{Written by Cursor Bugbot for commit a946e5d. This will update automatically on new commits. Configure here.}