fix(audit): keep personal data and credentials out of audit events

Anonymize the audit events of a deleted user, store only the ID and
name of other users, and drop the metadata copy of actor_email.
Store URLs without query strings, registries without user info, and
the exception class instead of raw SSH errors.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

app/Http/Controllers/Api/ServerTransferController.php

@@ -112,7 +112,7 @@ class ServerTransferController extends Controller
         auditLog('api.server.migrate', [
             'team_id' => $teamId,
             'server_uuid' => $server->uuid,
-            'target_url' => data_get($server->server_metadata, 'migration.target_url'),
+            'target_url' => auditUrl(data_get($server->server_metadata, 'migration.target_url')),
         ]);
 
         return response()->json([