Redact credentials from tool arguments saved in the trace

Redacts values for keys such as `api_key`, `api_secret` and `password` before tool arguments are saved to the chat trace.