fix(aibox): batch H audit fixes - subagent cancel propagation, scheduler timeout, exec process-group reaping

Fourth audit round (see docs/reports/aibox_audit_20260817.md §11):
- H1: shared parent cancel event no longer cleared on subagent first think
  (N5 regression); parent-already-cancelled skips subagent start
- M1: /reload_prompts moved off event loop (run_in_executor, N3 sibling)
- M2: skill --help scan prewarmed before serving connections
- M3: scheduler task-level timeout (scheduler.task_timeout, default 600s)
- M4: get_recent_memories(None) capped instead of full-table load
- M5: memo delete now physically removes rows (was complete-only)
- M6: PromptManager.reload builds new list then atomically swaps
- L1-L12: read_file arg coercion, proxy save failure reported, SSE
  utf-8 tolerance, persona realpath check, truncation char boundary,
  compressor div0, skill path quoting, ask_user required, POSIX
  process-group kill (pgid captured at Popen), web scheme whitelist,
  registry redact substring match, Bearer redaction in failover logs

aibox/tools/registry.py

@@ -16,13 +16,18 @@ from common import Logger, constants, i18n
 from .base import Tool
 
 # 工具参数名命中这些关键词时，debug 日志里打码（防密码/密钥进日志文件）
-_SENSITIVE_PARAM_KEYS = {"password", "api_key", "token", "secret", "authorization"}
+# L11（审计 2026-08-18）：精确匹配漏掉 apiKey/access_token/passwd 等变体，
+# 改包含匹配——日志场景下过度打码可接受，漏打码才是问题。
+_SENSITIVE_PARAM_KEYS = (
+    "password", "passwd", "api_key", "apikey", "token", "secret",
+    "authorization", "credential",
+)
 
 
 def _sanitize_kwargs(kwargs: Dict) -> Dict:
     """复制一份参数并把敏感键的值替换为 ***（仅用于日志输出）"""
     return {
-        k: ("***" if str(k).lower() in _SENSITIVE_PARAM_KEYS else v)
+        k: ("***" if any(s in str(k).lower() for s in _SENSITIVE_PARAM_KEYS) else v)
         for k, v in kwargs.items()
     }