fix(icaptcha-client): do not log raw ICAPTCHA_INSECURE value

The non-truthy warn path previously recorded the full trimmed env
value. That is arbitrary deployment input; report only that the
setting is invalid (#246 review).

Author: Ayush7614

crates/icaptcha-client/src/lib.rs

@@ -105,8 +105,9 @@ fn icaptcha_insecure_enabled() -> bool {
                 true
             } else {
                 if !t.is_empty() {
+                    // Do not log the raw env value: it is arbitrary deployment
+                    // input and may contain secrets or terminal controls (#246).
                     tracing::warn!(
-                        value = %t,
                         "GITLAWB_ICAPTCHA_INSECURE is set but not truthy (expected 1 or true); \
                          loopback HTTP trust relaxation remains disabled"
                     );