- Never log the MDM-provided upload URL (it can embed credentials or
signed query tokens): mark the key secret so it is redacted, and drop
the raw value from the invalid-URL warning.
- Clear DebugBundleUploadURL when a replacement policy no longer carries
the key, so a removed override can never keep directing uploads to a
previously-enforced host; covered by a policy-replacement test.
- macOS docs: state "https URL with a host" consistently, and make the
managed-plist helper fail closed on an invalid allowRemoteJobs value
(emit false rather than dropping the key).
f054cbacde