security: remove leaked production credentials from docs
Replace live Steadfast/Pathao/RedX/Paperfly/Google-Maps keys, Pathao login and Paperfly basic-auth in README.md + MASTER_OPERATIONS_MANUAL.md with <PLACEHOLDER> tokens. These belong in env/secrets, never in committed docs.
This commit is contained in: