PYTHON-5927 Redact TLS keyfile password from client repr

[dfgvaetyj3456356-hash]

Summary

• redact tlsCertificateKeyFilePassword when rendering MongoClient/AsyncMongoClient repr output
• preserve existing repr formatting for non-sensitive options
• add sync and async unit regression coverage

Why

tlsCertificateKeyFilePassword is a passphrase for encrypted client certificate key files. Before this change, creating a client with that option and logging or inspecting repr(client) included the raw passphrase. This keeps the option visible for debugging while avoiding disclosure of the secret value.

This is intentionally scoped to the TLS keyfile passphrase and does not touch authMechanismProperties, which is already covered by a separate open PR.

Test

python -m pytest test\test_client.py::ClientUnitTest::test_repr_redacts_tls_certificate_keyfile_password test\asynchronous\test_client.py::AsyncClientUnitTest::test_repr_redacts_tls_certificate_keyfile_password -q
python -m py_compile pymongo\synchronous\mongo_client.py pymongo\asynchronous\mongo_client.py test\test_client.py test\asynchronous\test_client.py
git diff --check

[codeowners-service-app]

Assigned NoahStapp for team dbx-python because blink1073 is out of office.

[Copilot]

Pull request overview

This PR prevents accidental secret disclosure by redacting the TLS client key passphrase (tlsCertificateKeyFilePassword / tlscertificatekeyfilepassword) from MongoClient and AsyncMongoClient repr() output, while keeping the option visible for debugging. It adds regression tests to ensure the passphrase no longer appears in repr(client).

Changes:

• Redact tlscertificatekeyfilepassword in MongoClient / AsyncMongoClient repr rendering.
• Add sync + async unit tests asserting repr() contains '<redacted>' and does not contain the raw passphrase.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File	Description
test/test_client.py	Adds a unit test verifying TLS keyfile passphrase is redacted from MongoClient.__repr__.
test/asynchronous/test_client.py	Adds a unit test verifying TLS keyfile passphrase is redacted from AsyncMongoClient.__repr__.
pymongo/synchronous/mongo_client.py	Implements repr redaction for tlscertificatekeyfilepassword.
pymongo/asynchronous/mongo_client.py	Implements repr redaction for tlscertificatekeyfilepassword.

[Jibola]

Hi, thanks for your contribution. Please update your pull request to be in line with out pull request template guidelines.