fix(audit): keep personal data and credentials out of audit events

Anonymize the audit events of a deleted user, store only the ID and
name of other users, and drop the metadata copy of actor_email.
Store URLs without query strings, registries without user info, and
the exception class instead of raw SSH errors.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

app/Http/Controllers/Api/ServerTransferController.php

@@ -112,7 +112,7 @@ class ServerTransferController extends Controller
         auditLog('api.server.migrate', [
             'team_id' => $teamId,
             'server_uuid' => $server->uuid,
-            'target_url' => data_get($server->server_metadata, 'migration.target_url'),
+            'target_url' => auditUrl(data_get($server->server_metadata, 'migration.target_url')),
         ]);
 
         return response()->json([

app/Http/Controllers/Controller.php

@@ -279,7 +279,6 @@ class Controller extends BaseController
             'already_member' => $alreadyMember,
             'member_id' => $user->id,
             'member_name' => $user->name,
-            'member_email' => $user->email,
             'actor_id' => $user->id,
             'actor_name' => $user->name,
             'actor_email' => $user->email,