Do not print out NODE_AUTH_TOKEN

[mobilutz]

During heroku build phase, this buildpacks prints out the runtime environments like so:

-----> Creating runtime environment

       NPM_CONFIG_LOGLEVEL=error
       USE_YARN_CACHE=true
       NODE_VERBOSE=false
       NODE_ENV=production
       NODE_AUTH_TOKEN=REDACTED
       NODE_MODULES_CACHE=true

I redacted the content of NODE_AUTH_TOKEN manually here, and I would love to see this done by the buildpack.

Yes I do know, that one can still see the config-var when looking at them through settings. But having them printed here in the logs in not a good practice, as I can easily be copied and posted by someone not knowing what this is.

I don't think I will find time to look and work on this, but maybe in the future when there is no PullRequest yet I will tackle this.

[colincasey]

@mobilutz the code that prints out the environment variables will log any environment variable that starts with NODE_ (see here) which is why it is printing NODE_AUTH_TOKEN. If you rename that config var to AUTH_TOKEN or something like that then you should no longer see it printed.