fix(security): remove account identifiers from log output (CWE-312)

src/FlowLedger.Infrastructure/Sync/FinancialSyncService.cs

@@ -318,9 +318,12 @@ private async Task<int> SeedRecurringFlowsAsync(
             // Resolve domain account; skip seeds whose provider account wasn't synced.
             if (!providerIdToAccount.TryGetValue(seed.ProviderAccountId, out var account))
             {
+                // Do not log the raw provider account ID — it is an account-scoped
+                // identifier that should not appear in log output (financial app PII policy).
+                // The seed name provides enough context for diagnostics.
                 _logger.LogWarning(
-                    "Skipping recurring flow seed '{Name}': provider account '{ProviderId}' not found.",
-                    seed.Name, seed.ProviderAccountId);
+                    "Skipping recurring flow seed '{Name}': associated provider account not found in synced set.",
+                    seed.Name);
                 continue;
             }
 

src/FlowLedger.Web/ApiClient/FlowLedgerApiClient.cs

@@ -88,9 +88,13 @@ private async Task<T> ExecuteAsync<T>(string operationDescription, Func<Task<T>>
 
             if (!response.IsSuccessStatusCode)
             {
+                // Do not log the raw URL here — it may contain account identifiers
+                // embedded as query parameters (e.g. ?accountId=...) that constitute
+                // PII in a financial application. The operation description is sufficient
+                // to identify the failed call without exposing account-scoped data.
                 _logger.LogError(
-                    "Non-success status {StatusCode} from {Url} during {Operation}",
-                    (int)response.StatusCode, url, operationDescription);
+                    "Non-success status {StatusCode} during {Operation}",
+                    (int)response.StatusCode, operationDescription);
                 throw new ApiClientException(
                     $"Couldn't {operationDescription} (server returned {(int)response.StatusCode}).",
                     response.StatusCode);