milestone 13 discrepancies: redact credentials from urls in logs, metrics and cli output

docs/explanation/performance-and-testing.md

@@ -15,8 +15,8 @@ PLAN §18 sets five:
 - sustained ≥ 100 qps on a Raspberry Pi 5;
 - blocklist lookup p95 < 1 ms;
 - cached response p95 < 5 ms;
-- memory with ~1M blocked domains < 100 MB;
-- stripped static binary < 10 MB per arch, < 15 MB with the embedded frontend.
+- memory with ~1M blocked domains < 100 MiB;
+- stripped static binary < 10 MiB per arch, < 15 MiB with the embedded frontend.
 
 They are household-scale numbers, and they are deliberately unambitious. 100
 qps is far more than a house generates; the point of the target is not speed