[SandObserver]

Summary

• Log u.origin alone in the ping failure record, dropping the request path.
• Update the three existing assertions that expected the path, and add a case proving a path segment cannot reach the record.

Credentials in the authority and secrets in the query string were already excluded. The path was not, and several self-hosted services carry an API key as a path segment rather than as a query parameter, so a failed ping could write a live credential into the container log and leave it there for the life of the log.

The origin answers what the operator needs to know, which is which service is unreachable.

Testing
All green, including the Docker build. Added 1 test for the path case and updated 3 existing assertions; no other test asserted on the field.

Checklist

• Stays within the project constraints: one container, no runtime dependencies, no build step (see CONTRIBUTING.md).
• Tests added or updated for new logic, and the full suite, lint, and typechecks pass.
• Docs updated if behavior or configuration changed. No documentation describes the contents of this record.
• CHANGELOG.md updated under Unreleased if the change is user-visible. The changelog entry lands with the documentation change.