vulnerability in envbuilder project

While working on envbuilder project, I discovered a vulnerability [(CVE-2025-66411](https://vulert.com/vuln-db/CVE-2025-66411)) in the github.com/coder/coder/v2 package. The issue occurs because the Workspace Agent logs sensitive environment variables in plaintext without sanitization. Updating to the patched version and disabling agent logs temporarily mitigates the risk.

[CVE Link](https://vulert.com/vuln-db/CVE-2025-66411)
[CVE Report](https://vulert.com/vuln-scan/list/ba54e292-6b19-462d-b02d-77839d9a04f9)

未确定任何文件、测试或入口点。首先跟踪 envbuilder 对 github.com/coder/coder/v2 的使用情况以及 Workspace Agent 的日志记录路径；确认依赖项更新和日志记录行为能够解决报告的环境变量明文暴露问题。

由索引模型根据 Issue 内容生成。