chore: Apply masking (#3234)

Based on the:
- experiments here:
#3232
- docs here:
https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/workflow-commands-for-github-actions#masking-a-value-in-a-log

.github/workflows/tests.yml

@@ -36,6 +36,14 @@ jobs:
           go-version-file: ./go.mod
           cache: false
 
+      - name: Apply masking
+        run: |
+          while IFS= read -r line || [[ -n $line ]]; do
+            echo "::add-mask::$line"
+          done < <(printf '%s' "$SF_TF_GH_MASKING")
+        env:
+          SF_TF_GH_MASKING: ${{ secrets.SF_TF_GH_MASKING }}
+
       - name: Install dependencies
         run: make dev-setup