OAuth Callback Logs Need a Redaction Boundary

A practical threat model for OAuth callback logs, with safe fields, redaction rules, and a review checklist for authentication teams.