Hide Deeploy mandatory secrets in dAuth

[aledefra]

Summary

• extract approved mandatory Deeploy secret paths from materialized deploy plans
• replace those values with the fixed dAuth placeholder before dispatch/persistence
• write the job-scoped secret bundle to DAUTH_JOB_SECRETS before create dispatch and before update delete/redeploy
• sanitize return_request responses for the same mandatory paths

Notion: https://app.notion.com/p/38bd59ab6657807cb291cafcd16b1954

Test plan

• python3 -m py_compile extensions/business/deeploy/deeploy_mixin.py extensions/business/deeploy/deeploy_manager_api.py extensions/business/deeploy/tests/test_create_requests.py extensions/business/deeploy/tests/test_process_request.py extensions/business/deeploy/tests/test_update_requests.py
• git diff --check

Blocked locally:

• PYTHONPATH=/Users/alessandro/programmazione/ratio1/edge_node:/Users/alessandro/programmazione/ratio1/naeural_core:/Users/alessandro/programmazione/ratio1/ratio1_sdk python3 -m unittest extensions.business.deeploy.tests.test_create_requests extensions.business.deeploy.tests.test_process_request
• blocked because system Python misses SDK EVM dependency eth_account