fix: parse runner retention kubectl output before redaction

src/mgr/runner-retention.ts

@@ -280,7 +280,7 @@ async function kubectlRun(kubectlCommand: string, args: string[]): Promise<{ cod
   }).catch((error: unknown) => {
     throw new AgentRunError("infra-failed", `failed to start kubectl: ${error instanceof Error ? error.message : String(error)}`, { httpStatus: 503 });
   });
-  return { ...result, stdout: redactText(stdout), stderr: redactText(stderr) };
+  return { ...result, stdout, stderr };
 }
 
 function compareCandidates(left: RunnerResourceEntry, right: RunnerResourceEntry): number {

src/selftest/cases/20-runner-k8s-job.ts

@@ -290,7 +290,7 @@ function runnerJob(name, createdAt, commandId) {
       namespace: "agentrun-v02",
       creationTimestamp: createdAt,
       labels: { "app.kubernetes.io/part-of": "agentrun", "app.kubernetes.io/name": "agentrun-runner", "app.kubernetes.io/component": "runner", "agentrun.pikastech.local/lane": "v0.2", "job-name": name },
-      annotations: { "agentrun.pikastech.local/run-id": "run-old", "agentrun.pikastech.local/command-id": commandId, "agentrun.pikastech.local/runner-id": "runner-old" },
+      annotations: { "agentrun.pikastech.local/run-id": "run-old", "agentrun.pikastech.local/command-id": commandId, "agentrun.pikastech.local/runner-id": "runner-old", token: null, secret: null },
     },
     status: {},
   };