vocab_mapper: don't log input data

The vocab mapper currently logs the raw input data. But this means that if we submit any user's API keys, they're freely available to anyone reading the server logs.

Solutions:

• don't log raw input, only log formatted input
• redact any sensitive values in the input

Maybe a wider point here is: perhaps the Apollo server should have a system for automatically logging all raw inputs for data purposes. We can use an input.credentials object and only log the keys of that, rather than the values. Or log partial values actually, the last 5 characters or so. That way, individual services don't have to worry about this stuff, and the official guideline can be "don't ever log raw input data".

It would be useful debugging to see a hint of the API key's value

Start at the vocab_mapper logging path and inspect how the Apollo server handles input.credentials. Determine whether the fix should stop raw-input logging or introduce redaction, then verify that API keys and other sensitive values are absent or safely represented in server logs.