Redact CodeArtifact tokens from pip install logs

[NguyenCong2k]

Summary

• redact credentials embedded in package index URLs before logging pip commands
• keep the actual pip command unchanged
• add regression coverage for CodeArtifact index URL redaction

Test

python -m pytest sagemaker-core/tests/unit/test_install_requirements.py -q

[Copilot]

Pull request overview

This PR updates the CodeArtifact-aware requirements installer to redact credentials from logged pip commands while preserving the actual command used for installation.

Changes:

• Adds URL credential redaction for pip command logging.
• Updates install_requirements logging to use the redacted command representation.
• Adds regression coverage to ensure CodeArtifact tokens are not logged.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
sagemaker-core/src/sagemaker/core/utils/install_requirements.py	Adds URL credential redaction and applies it to pip command logging.
sagemaker-core/tests/unit/test_install_requirements.py	Adds log-capture coverage for CodeArtifact token redaction.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[NguyenCong2k]

Updated the redaction helper to redact the full URL userinfo instead of preserving the username. This now covers username-only token auth as well as username:password URLs.\n\nTest:\n\n\�ash\npython -m pytest sagemaker-core/tests/unit/test_install_requirements.py -q\n\n\nResult: 24 passed.

[NguyenCong2k]

Updated the redaction helper to redact the full URL userinfo instead of preserving the username. This now covers username-only token auth as well as username:password URLs.\n\nTest:\n\n\\�ash\npython -m pytest sagemaker-core/tests/unit/test_install_requirements.py -q\n\\n\nResult: 24 passed.