Replace full key values in Log.d() calls with length-only metadata to prevent key material leakage via logcat access. Reviewed in codereview.md (recommendation #1).
