fix: drop display_name from logs to avoid logging PII (#145)

The display name is PII; logging it on every request line risks
violating privacy rules. Keep only the opaque user_id (UUID), which is
sufficient to correlate a request with its user without exposing
personal data.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>