Logs should explain failures without copying private input

Useful logs record the operation, a safe request identifier, and the failure category. Avoid dumping credentials, personal data, or full request bodies; those can expose more than needed and make logs harder to review.