Microsoft `x-apikey` Exposed in Mozilla CI Public Logs

Summary

A Microsoft telemetry API key (x-apikey) was found exposed in publicly accessible Mozilla CI logs. The key appears in HTTP POST requests sent to Microsoft's telemetry endpoint during automated Firefox testing and is captured via mitmproxy logs.

While the security impact is minimal (telemetry API keys with limited functionality) and the report is considered out of scope of our program, we took action to move mitmproxy.log artifacts to internal storage to prevent future credential leakage. Therefore, we accepted the report and paid a bonus as a recognition of the reporter's efforts.