docs: Add rule to never write internal IPs to logs

AGENTS.md

@@ -10,6 +10,9 @@ test login here http://localhost:3000/suite/auth/login.html
 I AM IN DEV ENV, but sometimes, pasting from PROD, do not treat my env as prod! Just fix, to me and push to CI. So I can test in PROD, for a while.
 >Use Playwrigth MCP to start localhost:3000/<bot> now.
 > **NEVER CREATE FILES WITH SECRETS IN THE REPOSITORY ROOT**
+> - ❌ **NEVER** write internal IPs to logs or output
+> - When debugging network issues, mask IPs (e.g., "10.x.x.x" instead of "10.16.164.222")
+> - Use hostnames instead of IPs in configs and documentation
 See botserver/src/drive/local_file_monitor.rs to see how to load from /opt/gbo/data the list of development bots.
 - ❌ **NEVER** use `cargo clean` - causes 30min rebuilds, use `./reset.sh` for database issues