🐛 Ensure settings are redacted. (#924)

fixes #923

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Startup now logs the full application configuration in YAML with
sensitive passphrases redacted, improving diagnostics and visibility.

* **Style**
* Reformatted the startup log into a single multi-line message for
clearer, more readable output on launch.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Signed-off-by: Jeff Ortel <[email protected]>
Signed-off-by: Cherry Picker <[email protected]>

Author: jortel

cmd/main.go

@@ -94,7 +94,7 @@ func addonManager(db *gorm.DB) (mgr manager.Manager, err error) {
 
 // main.
 func main() {
-	log.Info("Started", "settings", Settings)
+	log.Info("Started:\n" + Settings.String())
 	var err error
 	defer func() {
 		if err != nil {

settings/all.go

@@ -3,6 +3,8 @@ package settings
 import (
 	"os"
 	"strconv"
+
+	"gopkg.in/yaml.v2"
 )
 
 var Settings TackleSettings
@@ -34,6 +36,22 @@ func (r *TackleSettings) Load() (err error) {
 	return
 }
 
+// String returns a YAML representation.
+// Redacted as needed.
+func (r TackleSettings) String() (s string) {
+	redacted := "********"
+	r.Encryption.Passphrase = redacted
+	r.Auth.Keycloak.ClientSecret = redacted
+	r.Auth.Keycloak.Admin.Pass = redacted
+	r.Auth.Keycloak.Admin.User = redacted
+	b, err := yaml.Marshal(r)
+	if err != nil {
+		panic(err)
+	}
+	s = string(b)
+	return
+}
+
 // Get boolean.
 func getEnvBool(name string, def bool) bool {
 	boolean := def