fix(db-*,epf-*): точная редактура секретов по значению вместо regex по токену

Прежняя маскировка (^/N|/P по токену) на *nix цепляла путь, начинающийся с
заглавной /N или /P (напр. /Projects, /Numbers) — косметическая пере-маскировка
в строке Running. Заменено на редактуру конкретных значений (пароль/пользователь)
через литеральную замену: секрет скрывается везде, где встречается, а похожие на
флаг пути не трогаются. 11 навыков, оба порта.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.claude/skills/db-load-git/scripts/db-load-git.ps1

@@ -1,4 +1,4 @@
-# db-load-git v1.14 — Load Git changes into 1C database
+# db-load-git v1.15 — Load Git changes into 1C database
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 # NB: *nix-раскладку платформы (/opt/1cv8/<ver>/1cv8, без .exe) знает только .py-порт — PS на *nix не исполняется.
 <#
@@ -108,10 +108,11 @@ param(
 $OutputEncoding = [System.Text.Encoding]::UTF8
 [Console]::OutputEncoding = [System.Text.Encoding]::UTF8
 
-function Format-SafeArgs {
-    # Mask credential tokens (/N, /P for 1cv8; --user=, --password= for ibcmd) for display.
-    param([string[]]$A)
-    ($A | ForEach-Object { $_ -replace '^(/[NP]).+', '$1***' -replace '^(--(user|password)=).+', '$1***' }) -join ' '
+function Protect-Secrets {
+    # Redact literal secret values from a display string (String.Replace is literal, not regex).
+    param([string]$Text, [string[]]$Secrets)
+    foreach ($s in $Secrets) { if ($s) { $Text = $Text.Replace($s, '***') } }
+    return $Text
 }
 
 function Get-ExitAnnotation {
@@ -395,7 +396,7 @@ try {
         if ($UserName) { $arguments += "--user=$UserName" }
         if ($Password) { $arguments += "--password=$Password" }
         $arguments += "--data=$tempDir"
-        Write-Host "Running: ibcmd $(Format-SafeArgs $arguments)"
+        Write-Host "Running: ibcmd $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
         $__ib = Invoke-IbcmdProcess $V8Path $arguments
         $output = $__ib.Output
         $exitCode = $__ib.ExitCode
@@ -411,7 +412,7 @@ try {
             if ($UserName) { $applyArgs += "--user=$UserName" }
             if ($Password) { $applyArgs += "--password=$Password" }
             $applyArgs += "--data=$tempDir"
-            Write-Host "Running: ibcmd $(Format-SafeArgs $applyArgs)"
+            Write-Host "Running: ibcmd $(Protect-Secrets ($applyArgs -join ' ') @($Password, $UserName))"
             $__ib = Invoke-IbcmdProcess $V8Path $applyArgs
             $applyOut = $__ib.Output
             $exitCode = $__ib.ExitCode
@@ -469,7 +470,7 @@ try {
     # --- Execute ---
     Write-Host ""
     Write-Host "Executing partial configuration load..."
-    Write-Host "Running: 1cv8.exe $(Format-SafeArgs $arguments)"
+    Write-Host "Running: 1cv8.exe $(Protect-Secrets ($arguments -join ' ') @($Password, $UserName))"
 
     $process = Start-Process -FilePath $V8Path -ArgumentList $arguments -NoNewWindow -Wait -PassThru
     $exitCode = $process.ExitCode

.claude/skills/db-load-git/scripts/db-load-git.py

@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-# db-load-git v1.14 — Load Git changes into 1C database
+# db-load-git v1.15 — Load Git changes into 1C database
 # Source: https://github.com/Nikolay-Shirokov/cc-1c-skills
 
 import argparse
@@ -145,14 +145,13 @@ def describe_exit(code):
     return ""
 
 
-def _mask(args):
-    """Mask credential tokens (/N, /P for 1cv8; --user=, --password= for ibcmd) for display."""
-    out = []
-    for a in args:
-        a = re.sub(r"^(/[NP]).+", r"\1***", a)
-        a = re.sub(r"^(--(?:user|password)=).+", r"\1***", a)
-        out.append(a)
-    return out
+def _redact(text, *secrets):
+    """Redact literal secret values (password, user) from a display string —
+    precise, never touches lookalike paths."""
+    for s in secrets:
+        if s:
+            text = text.replace(s, "***")
+    return text
 
 
 def main():
@@ -341,7 +340,7 @@ def main():
             if args.Password:
                 arguments.append(f"--password={args.Password}")
             arguments.append(f"--data={ib_data}")
-            print(f"Running: ibcmd {' '.join(_mask(arguments))}")
+            print(f"Running: ibcmd {_redact(' '.join(arguments), args.Password, args.UserName)}")
             result = run_ibcmd([v8path] + arguments, bool(args.UserName))
             if result.returncode != 0:
                 print(f"Error loading changes (code: {result.returncode}){describe_exit(result.returncode)}", file=sys.stderr)
@@ -361,7 +360,7 @@ def main():
                 if args.Password:
                     apply_args.append(f"--password={args.Password}")
                 apply_args.append(f"--data={ib_data}")
-                print(f"Running: ibcmd {' '.join(_mask(apply_args))}")
+                print(f"Running: ibcmd {_redact(' '.join(apply_args), args.Password, args.UserName)}")
                 ar = run_ibcmd([v8path] + apply_args, bool(args.UserName))
                 exit_code = ar.returncode
                 if exit_code == 0:
@@ -416,7 +415,7 @@ def main():
         # --- Execute ---
         print("")
         print("Executing partial configuration load...")
-        print(f"Running: 1cv8.exe {' '.join(_mask(arguments))}")
+        print(f"Running: 1cv8.exe {_redact(' '.join(arguments), args.Password, args.UserName)}")
 
         result = subprocess.run(
             [v8path] + arguments,