Audit RDP password lifetime in renderer/WASM

[kyroskoh]

Context

RDP CredSSP requires the password to reach WASM — a documented exception to “secrets never leave main”.

Goal

Minimize lifetime and leakage risk of the RDP password in the renderer/WASM path; prove with tests/docs.

Acceptance criteria

• Trace password flow: main → IPC → renderer → IronRDP WASM
• Password zeroed / dropped after auth (no retention in React state/logs)
• Confirm no logging of password material
• Add teardown / leak-oriented unit tests where practical
• Document the exception and mitigations in code comments or docs/

References

• store.js SECRET_FIELDS comments, rdp.js, RdpView.jsx, rdp-wasm.js