Split security logging contracts

tests/Architecture/SecurityLoggingTelemetryContractTest.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace MintyPHP\Tests\Architecture;
+
+use PHPUnit\Framework\TestCase;
+
+final class SecurityLoggingTelemetryContractTest extends TestCase
+{
+    use ProjectFileAssertionSupport;
+
+    public function testFrontendTelemetrySanitizesSecretsAndPiiMarkers(): void
+    {
+        $content = $this->readProjectFile('lib/Service/Audit/FrontendTelemetryIngestService.php');
+
+        self::assertStringContainsString('[REDACTED]', $content);
+        self::assertStringContainsString('[REDACTED_EMAIL]', $content);
+        self::assertStringContainsString('[UUID]', $content);
+        self::assertStringContainsString('[TOKEN]', $content);
+        self::assertStringContainsString('(token|access_token|refresh_token|id_token|authorization|api_key|secret)', $content);
+    }
+}