Redact sensitive duplicate query parameter values in ApiServlet logs

[dheeraj12347]

Summary

This PR fixes a sensitive information disclosure issue in ApiServlet where duplicate sensitive query parameter values were logged in plaintext before authentication.

Previously, when duplicate query parameters such as password were received, checkSingleQueryParameterValue() logged all values using Arrays.toString(...), which could expose sensitive information in management logs even if the request was later rejected.

Changes

• Redacted duplicate values for sensitive query parameters before logging.
• Introduced a shared helper to identify sensitive parameter names.
• Reused the helper in getCleanParamsString() to avoid duplicating sensitive parameter detection logic.
• Preserved the existing duplicate-parameter warning behavior for non-sensitive parameters.
• Added regression tests covering both sensitive and non-sensitive parameter handling.

Testing

• Verified that duplicate sensitive parameters are logged as [REDACTED, REDACTED].
• Verified that duplicate non-sensitive parameters continue to be logged unchanged.
• Added unit tests for sensitive parameter detection.