fix(auth): скрыть пароли от читателя и согласовать Portal

docs/ux-ui/acceptance/portal196-sql196-result.json

@@ -0,0 +1,29 @@
+{
+  "date": "2026-10-13",
+  "block": "12.5.196",
+  "passed": true,
+  "profiles": [
+    {
+      "date": "2026-10-13",
+      "block": "12.5.196",
+      "database": "mm_accept_166_1791879658920",
+      "scope": "ephemeral role and precreated owned database; no copied production credentials",
+      "tests": [
+        {
+          "command": "npm --prefix backend run test:server-privacy",
+          "passed": true,
+          "durationMs": 10996,
+          "roles": 3,
+          "endpointsPerRole": 2,
+          "storedPasswordPreserved": true,
+          "postgresUnavailableSkip": false
+        }
+      ],
+      "scopedRoleVerified": true,
+      "passed": true,
+      "databaseRemoved": true,
+      "roleRemoved": true,
+      "testContainerRemoved": true
+    }
+  ]
+}