Sanitize VCS remote URL

[manusa]

Description

Seen in quarkusio/quarkus#38055

We're very likely affected by the same problem.

VCS URLs should be sanitized before persisted.

[rohanKanojia]

I can reproduce the issue.

To fix the issue, Shall we port Dekorate's Git.sanitizeRemoteUrl . I'm not able to find any pre-existing library method that can remove basic authentication credentials from URL

[manusa]

To fix the issue, Shall we port Dekorate's Git.sanitizeRemoteUrl .

Whatever works, try to create a thorough set of tests first with edge and corner cases. Then we can see if we want to port that solution or create something more optimal.