(PUP-8134) Allow tasks to specify that parameters are "sensitive"

This commit adds the task metadata field "sensitive" to the whitelist of
metadata fields. This field can be used to specify that a parameter
value should be redacted from logs, etc.

This does not include any behavior change to actually redact data, just
to allow those tasks to be run.

Author: nicklewis

lib/puppet/pops/loader/task_instantiator.rb

@@ -54,7 +54,8 @@ def self.ensure_initialized
       Types::Task::PARAMETER_NAME_PATTERN,
       tf.struct(
         tf.optional('description') => tf.string,
-        tf.optional('type') => Types::PStringType::NON_EMPTY
+        tf.optional('type') => Types::PStringType::NON_EMPTY,
+        tf.optional('sensitive') => tf.boolean
       )
     )
 

spec/unit/pops/types/task_spec.rb

@@ -133,7 +133,8 @@ def compile(code = nil)
               "supports_noop": true,
               "parameters": {
                  "message": {
-                   "type": "String"
+                   "type": "String",
+                   "sensitive": false
                  },
                  "font": {
                    "type": "Optional[String]"
@@ -456,7 +457,7 @@ def compile(code = nil)
       type Service::Init = Task {
         constants => {
           supports_noop => true,
-          input_format => 'stdin:json'
+          input_method => 'stdin'
         },
         attributes => {
           action => Service::Action,