The Peppol authentication flow no longer records full access tokens in logs. This reduces the risk of sensitive credentials being exposed while preserving the ability to troubleshoot authentication issues.

don't log full token

Description of the issue/feature this PR addresses:

Current behavior before PR:

Desired behavior after PR is merged:




---
I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr

Discuss now uses a separate secure key for each voice or video channel instead of reusing a broader database secret. This reduces the risk of unauthorized access between channels and strengthens protection for real-time conversations.

derive channel-specific key from db secret and the channel id.

Forward-Port-Of: odoo/odoo#287410
Forward-Port-Of: odoo/odoo#286304