CVE-2024-8775: Ansible vulnerable to Insertion of Sensitive Information into Log File

The vulnerability stems from improper handling of no_log values in result formatting. The commit diff shows critical changes in _return_formatted() where boolean/None values are preserved before no_log filtering and restored afterward. This indicates the original implementation's remove_values() call would mask booleans like changed=False if they matched no_log patterns (e.g., if a vault secret was 'False'), while failing to properly mask actual secrets. The associated tests in module_that_has_secret.py validate this fix by ensuring booleans remain visible while secrets are masked.