fix(security): remediate telecom compliance findings

backend/app/api/wecom.py

@@ -111,15 +111,15 @@ async def wecom_callback_event(request: Request):
 
     import logging
     _log = logging.getLogger("wecom_callback")
-    _log.warning(f"wecom msg: type={msg_type} from={from_user} content={repr(content)} event={event} key={event_key}")
+    _log.info("wecom callback received: type=%s event=%s key=%s", msg_type, event, event_key)
 
     # Triggers for binding
     if (msg_type == "text" and content == "绑定") or (msg_type == "event" and event == "click" and event_key == "BIND_ACCOUNT"):
-        _log.warning(f"wecom bind triggered for {from_user}")
+        _log.info("wecom bind triggered")
         _handle_bind_request(from_user)
         return PlainTextResponse(content="success")
 
-    _log.warning(f"wecom msg ignored (no match)")
+    _log.info("wecom message ignored (no matching action)")
     return PlainTextResponse(content="success")