Sanitized subprocess environments for Hooks v2 command handlers.
Build an inherited environment safe to pass to hook subprocesses.
Strips values whose names look like secrets. Hooks are user-authored trusted code, but secret values should not be ambiently available.
