clawhdf5-remote, h5rs: URLs' credentials are never shown

Every RemoteError message and HttpStorage's Debug output held the URL as
given, with any user:password@ and the query string — for a presigned
S3/GCS/Azure URL, its signature or token. An application logging the
error leaked the credential.

- New clawhdf5_remote::redact_url: no userinfo, no fragment, query values
  replaced by REDACTED (plain key names kept).
- HttpStorage formats every message with the redacted URL, and scrubs the
  URL's secret parts from errors of the HTTP client (whose texts can echo
  the URI); Debug shows the redacted URL. storage_for_url's and the object
  store URL errors are redacted too. HttpStorage::url() still returns the
  URL as given, documented as not for logging.
- h5rs prints FILE arguments that are URLs redacted: in errors and in
  dump/stat/check/diff output.
- The test server can force a status and send a wrong Content-Range.

Tests: 404, 403 (at open and on a read), wrong Content-Range (at open and
on a read), no range support, encoded body, ETag change, timeout,
connection closed and bad scheme errors, Display and Debug, contain none
of the secrets; h5rs likewise for every subcommand.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

crates/clawhdf5-tools/tests/remote.rs

@@ -119,3 +119,42 @@ fn check_refuses_a_remote_file_beyond_the_download_limit() {
     assert_eq!(rc, 2, "{out}");
     assert!(out.contains("more than the download limit"), "{out}");
 }
+
+/// A URL's credentials (userinfo, a presigned URL's query string) are not
+/// printed: not in errors, not in the file name of the output.
+#[test]
+fn credentials_in_urls_are_not_printed() {
+    let tall = Path::new(env!("CARGO_MANIFEST_DIR")).join("../clawhdf5/tests/fixtures/tall.h5");
+    let server = server::Server::start(vec![("/t.h5".into(), std::fs::read(&tall).unwrap())]);
+    let url = |path: &str| {
+        format!(
+            "http://user:hunter2@{}{path}?X-Amz-Signature=SECRETSIG",
+            server.addr
+        )
+    };
+    for args in [
+        vec!["ls", "-r"],
+        vec!["dump"],
+        vec!["stat"],
+        vec!["check"],
+        vec!["check", "--max-download", "10"],
+    ] {
+        for path in ["/t.h5", "/missing.h5"] {
+            let u = url(path);
+            let mut a = args.clone();
+            a.push(&u);
+            let (out, _) = h5rs(&a);
+            assert!(
+                !out.contains("hunter2") && !out.contains("SECRETSIG"),
+                "h5rs {}: {out}",
+                a.join(" ")
+            );
+        }
+    }
+    let (out, rc) = h5rs(&["diff", tall.to_str().unwrap(), &url("/t.h5"), "/nope"]);
+    assert_eq!(rc, 2, "{out}");
+    assert!(
+        !out.contains("hunter2") && !out.contains("SECRETSIG"),
+        "{out}"
+    );
+}