Do not show Central token in error messages

[yanokwa]

Software and hardware versions

Collect v1.30.1

Problem description

Error messages sometimes show the entire URL (https://example.getodk.cloud/v1/key/12345/projects/1). The 12345 is a token that shouldn't be shown in a dialog because users sometime share the dialog messages in a screenshot.

https://forum.getodk.org/t/collect-cannot-establish-a-secure-connection/33847

Expected behavior

Dialog should be shown, but with the token replaced. Maybe with a small and fixed number of start or an ellipsis or a hash (https://example.getodk.cloud/v1/key/*****/projects/1

[seadowg]

We can reproduce this with Match Exactly errors in the notification. We should look at hiding the key wherever we show the URL (including the settings screen). We should make sure we can still copy/paste the URL wherever it appears.