fix(transport): keep harmless query values visible in --debug output

--debug replaced every query value with REDACTED, so it could not show which
filters were sent. Redact only parameters that can authenticate a request
(tokens, passwords, secrets, signatures, storage credentials, OAuth codes and
the OAuth state), and log the sanitized server message of failed responses.

A 404 now names the request instead of blaming the instance, and API errors
recorded from a request keep its instance and credential so a caller can look
up why it failed. Network failures keep the server they could not reach.

Signed-off-by: bircni <bircni@icloud.com>

internal/transport/api.go

@@ -54,7 +54,9 @@ func (t captureTransport) RoundTrip(req *http.Request) (*http.Response, error) {
 		return resp, err
 	}
 	data, _ := io.ReadAll(io.LimitReader(resp.Body, maxErrorBody))
-	holder.Store(newAPIError(resp.StatusCode, req.Method, req.URL.Path, t.token, data))
+	failure := newAPIError(resp.StatusCode, req.Method, req.URL.Path, t.token, data)
+	failure.bind(req.URL, t.base)
+	holder.Store(failure)
 	resp.Body = struct {
 		io.Reader
 		io.Closer