[ajzrva-sys]

Fixes #652.

The internal logger currently copies TrackResult.filename into shared rip logs, which can expose usernames and mount-point names. For example, /home/private-user/Music/Album/Disc 1/01.flac will now appear as Disc 1/01.flac when the log is written in the album directory.

Program.writeLog() passes the log directory to the built-in logger. Tracks within that directory retain their relative subdirectories and filenames; tracks outside it use only their basename. Without directory context, safe relative paths retain their existing spelling, while absolute or escaping paths use basenames.

This changes log presentation only. Internal track paths remain unchanged for ripping, verification, recovery, cue sheets, and playlists. The existing logger plugin calling convention is preserved.

This PR is based directly on develop and contains only the privacy correction and its regression tests. It does not include or depend on #711, #702, or #706.

Validation

• All 125 Python tests pass in a separate clean source copy on macOS with Python 3.11.
• Synthetic regressions cover home and mounted-volume paths, existing relative paths, nested templates and duplicate basenames, outside paths, HTOA, missing diagnostic filenames, written logs, YAML parsing, and SHA-256 verification.
• Separate compatibility copies pass with Harden rip robustness for quotes, bad TOCs, failed tracks, and AR verify #711 (152 tests), Keep tracks under the disc directory and surface rip retry errors #702 (145), and Truncate long path components for MusicBrainz titles (#453) #706 (139). The Harden rip robustness for quotes, bad TOCs, failed tracks, and AR verify #711 copy required a local merge resolution in writeLog() preserving its partial-log behavior; that resolution is not included here. Additional simulated full/partial-rip checks verify path privacy and digests, including HTOA failures.
• Full flake8 output is unchanged from the baseline: 16 existing violations, with none added. Patch whitespace checks pass.
• No personal audio collection or optical drive was used. Native Linux and optical-drive validation were not performed.