🛡️ Sentinel: [MEDIUM] Fix log injection via HTTPStatusError (salvages #835)

Severity: MEDIUM

Vulnerability: Unsanitized exception string from httpx.HTTPStatusError
is embedded into a new exception message, potentially leaking sensitive URLs.

Fix: Passed original_msg through sanitize_for_log() prior to raising
httpx.HTTPStatusError, ensuring defense-in-depth against log leakage.

Refs: #835 (salvage source)

Author: abhimehro

main.py

@@ -1978,7 +1978,7 @@ def fetch_folder_data(url: str) -> FolderData:
         # and reason phrase (e.g., "401 Unauthorized") in addition to our hint.
         original_msg = str(e)
         raise httpx.HTTPStatusError(
-            f"{original_msg} | hint: {hint} | url: {sanitize_for_log(url)}",
+            f"{sanitize_for_log(original_msg)} | hint: {hint} | url: {sanitize_for_log(url)}",
             request=e.request,
             response=e.response,
         ) from e