feat(gateway): report Matrix service and redact access token

src/gateway/handlers/config.ts

@@ -10,7 +10,7 @@ export interface ConfigHandlerDeps {
  * Redact sensitive values from config before returning.
  * Replaces API keys, tokens, passwords, and other credentials with "***".
  *
- * Covers: telegram, discord, slack, server, models (tiers + fallbacks + local_providers),
+ * Covers: telegram, discord, slack, matrix, server, models (tiers + fallbacks + local_providers),
  * web_search, audio, memory.embedding, automation (webhooks + gmail), and mcp server env vars.
  */
 export function redactConfig(config: Config): Record<string, unknown> {
@@ -33,6 +33,9 @@ export function redactConfig(config: Config): Record<string, unknown> {
   // Slack
   redact(raw.slack as Record<string, unknown>, 'bot_token', 'app_token', 'signing_secret');
 
+  // Matrix
+  redact(raw.matrix as Record<string, unknown>, 'access_token');
+
   // Server (gateway bearer token)
   redact(raw.server as Record<string, unknown>, 'token');