feat(auditlog): per-connection SQL parameter redaction opt-in (#23 M5)

src/ScadaLink.AuditLog/Configuration/PerTargetRedactionOverride.cs

@@ -14,4 +14,15 @@ public sealed class PerTargetRedactionOverride
 
     /// <summary>Additional body redactor regex patterns (appended to the global list).</summary>
     public List<string>? AdditionalBodyRedactors { get; set; }
+
+    /// <summary>
+    /// Opt-in SQL parameter redaction: case-insensitive regex matched against
+    /// each SQL parameter NAME in the M4 <c>AuditingDbCommand</c> RequestSummary
+    /// JSON (<c>{"sql":"...","parameters":{"@name":"value", ...}}</c>); values
+    /// whose name matches are replaced with <c>&lt;redacted&gt;</c>. Null (the
+    /// default) means parameter values are captured verbatim. Only applied to
+    /// <see cref="ScadaLink.Commons.Types.Enums.AuditChannel.DbOutbound"/>
+    /// rows.
+    /// </summary>
+    public string? RedactSqlParamsMatching { get; set; }
 }