fix(security): complete security and delivery compliance remediation

backend/app/main.py

@@ -9,12 +9,14 @@ from slowapi.errors import RateLimitExceeded
 from starlette.middleware.base import BaseHTTPMiddleware
 from starlette.responses import JSONResponse
 from app.core.config import settings
+from app.core.logging_utils import SensitiveDataFilter
 from app.api.v1 import auth, devices, check, import_data, stats, olt, provision, users, roles, inventory, settings as settings_api, audit, wechat, ws, monitor
 from app.middleware.audit_middleware import AuditMiddleware
 
 # 结构化 JSON 日志
 _handler = logging.StreamHandler()
 _handler.setFormatter(jsonlogger.JsonFormatter('%(asctime)s %(name)s %(levelname)s %(message)s'))
+_handler.addFilter(SensitiveDataFilter())
 logging.getLogger().handlers = [_handler]
 logging.getLogger().setLevel(logging.INFO)
 logging.getLogger('uvicorn.access').handlers = [_handler]