SECURITY: Remove sensitive API key logging from startup

- Removed debug logging that exposed API keys and secrets
- Previously logged: GROQ_API_KEY, GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET, SECRET_KEY
- Improved security posture for production deployment
- Bump version to 1.2.10

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

app.py

@@ -38,13 +38,7 @@ if __name__ == "__main__":
     logger.info(f"📁 Log file: {log_file}")
     logger.info(f"🐛 SSH debugging available via Dev Mode")
 
-    # Additional startup diagnostics
-    logger.debug("🔍 Environment check:")
-    required_vars = ["GROQ_API_KEY", "GOOGLE_CLIENT_ID", "GOOGLE_CLIENT_SECRET", "SECRET_KEY"]
-    for var in required_vars:
-        value = os.environ.get(var, "NOT_SET")
-        masked = value[:10] + "..." if len(value) > 10 and value != "NOT_SET" else value
-        logger.debug(f"   {var}: {masked}")
+    # Additional startup diagnostics (removed sensitive key logging for security)
 
     try:
         # Add startup delay to prevent rapid restart loops

pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "voicecal-ai"
-version = "1.2.9"
+version = "1.2.10"
 description = "A friendly interactive AI speechbot for booking Google Calendar appointments"
 authors = ["Peter <pgits.job@gmail.com>"]
 

version.txt

@@ -1 +1 @@
-1.2.9
+1.2.10