Fix: hide password in logs and revert to Supabase (UQAM timeout)

syscred/database.py

@@ -170,7 +170,9 @@ def init_db(app):
     db_url = os.environ.get('SYSCRED_DATABASE_URL')
     
     if db_url:
-        print(f"[SysCRED-DB] Using PostgreSQL database: {db_url}")
+        # Hide password in logs
+        safe_url = db_url.split('@')[0].split('//')[1].split(':')[0] + '@' + db_url.split('@')[1]
+        print(f"[SysCRED-DB] Using PostgreSQL database: postgresql://***@{safe_url.split('@')[1]}")
     else:
         # Fallback to SQLite - Supabase operations use REST API separately
         import tempfile