tools-log API: secret matcher to extend log masking with own secret classes, request-scoped registry of secrets to mask, scanner contract; no dependencies beyond the JDK

tools-log core: secret scanner over matchers, card number matcher, MDC and masking context propagation across threads

tools-log for Logback: structured JSON encoder (ECS-like), encoder wrapper that masks registered secrets, turbo filter that keeps DEBUG/TRACE off for loggers carrying personal data

tools-log for servlet applications: Logbook filter for incoming HTTP and filter that registers secrets found in request bodies for masking