fix(cursor): redact daemon token from dashboard start (#1540)

Redacts the Cursor daemon token from dashboard start output.

src/web-server/routes/cursor-routes.ts

@@ -234,7 +234,9 @@ router.post('/daemon/start', async (_req: Request, res: Response): Promise<void>
       port: cursorConfig.port,
       ghost_mode: cursorConfig.ghost_mode,
     });
-    res.json(result);
+    const { daemonToken: _redactedDaemonToken, ...publicResult } = result;
+    void _redactedDaemonToken;
+    res.json(publicResult);
   } catch (error) {
     res.status(500).json({ error: (error as Error).message });
   }