[fix] restrict sensitive information in release logs

apps/desktop/src/platform/linux/gui/tray/linux_tray.cpp

@@ -1193,7 +1193,7 @@ struct LinuxTrayImpl {
       icon_rgba.assign(pixels, pixels + static_cast<size_t>(width) *
                                            static_cast<size_t>(height) * 4);
       stbi_image_free(pixels);
-      LOG_INFO("Loaded Linux tray icon: {}", candidate.string());
+      LOG_DEBUG("Loaded Linux tray icon: {}", candidate.string());
       return true;
     }
 

apps/desktop/src/platform/windows/gui/application/local_host_application.cpp

@@ -56,7 +56,9 @@ bool GuiRuntime::ForwardUserSessionData(const std::string& id,
       (user_stream || user_control || host_info || preview || audio)) {
     if (!local_host_->Send({{"op", "data"}, {"id", id}, {"epoch", epoch}, {"stream", stream},
         {"bytes", Json::binary(std::vector<uint8_t>(data, data + size))}})) {
-      LOG_WARN("Cannot forward user-session data for [{}] on {}; reconnecting local frontend", id, stream);
+      LOG_WARN(
+          "Cannot forward user-session data on {}; reconnecting local frontend",
+          stream);
       local_gui_ready_ = false;
       // Reset the mirrored sessions so an incomplete reliable stream fails
       // explicitly. Never fall through to file/clipboard handling as SYSTEM.

apps/desktop/src/platform/windows/gui/application/portable_service_integration.cpp

@@ -46,9 +46,7 @@ bool InstallServiceWithElevation() {
   std::error_code error;
   if (!std::filesystem::is_regular_file(service_path, error) ||
       !std::filesystem::is_regular_file(helper_path, error)) {
-    LOG_ERROR("Portable service install failed: service binaries missing, "
-              "service={}, helper={}",
-              service_path.string(), helper_path.string());
+    LOG_ERROR("Portable service install failed: service binaries missing");
     return false;
   }
 

apps/desktop/src/platform/windows/gui/runtime/windows_service_runtime.cpp

@@ -298,8 +298,7 @@ void GuiRuntime::HandleWindowsServiceIntegration() {
     if (managed_host_frontend_ && id.rfind("lan/", 0) != 0) continue;
     const int ret = SendControllerData(id, msg.data(), msg.size(),
                                        control_data_label_.c_str());
-    if (ret != 0)
-      LOG_WARN("Windows service status send failed, peer={}, ret={}", id, ret);
+    if (ret != 0) LOG_WARN("Windows service status send failed, ret={}", ret);
   }
 #endif
 }