`codex doctor` was echoing config values, credentials included, into diagnostic reports.

PR #46962, merged September 21, replaces raw error strings from config.load failures with typed metadata, because configuration load errors could print configuration values into a report people routinely paste into bug threads. New behavior reports file, line and column when a ConfigLoadError is available and otherwise only the I/O error kind. Regression snapshots assert both tested JSON reporting modes omit test credentials. A diagnostic command that dumps your config into a shareable artifact is a category of bug I'd bet exists in three more tools right now.