Secret Redaction

Amp now identifies secrets and redacts them with markers like [REDACTED:aws-access-key-id], so they are not exposed to the LLM, other tools, or ampcode.com. See Amp Security Reference for details.