### Apache Airflow version

main (development)

### What happened

Password for connections and variables with secret in the name are not masked in audit logs.
<img width="1337" alt="Screenshot 2022-11-25 at 12 58 59 PM" src="https://user-images.githubusercontent.com/88504849/203932123-c47fd66f-8e63-4bc6-9bf1-b9395cb26675.png">
<img width="1352" alt="Screenshot 2022-11-25 at 12 56 32 PM" src="https://user-images.githubusercontent.com/88504849/203932220-3f02984c-94b5-4773-8767-6f19cb0ceff0.png">
<img width="1328" alt="Screenshot 2022-11-25 at 1 43 40 PM" src="https://user-images.githubusercontent.com/88504849/203933183-e97b2358-9414-45c8-ab8f-d2f913117301.png">


### What you think should happen instead

Password/value should be masked

### How to reproduce

1. Create a connection or variable(with secret in the name i.e. test_secret)
2. Open audit logs 
3. Observe the password


### Operating System

mac os

### Versions of Apache Airflow Providers

_No response_

### Deployment

Virtualenv installation

### Deployment details

_No response_

### Anything else

_No response_

### Are you willing to submit PR?

- [ ] Yes I am willing to submit a PR!

### Code of Conduct

- [X] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)

#
#
#
from __future__ import annotations
import functools
import gzip
import logging
from io import BytesIO as IO
from itertools import chain
from typing import Callable, TypeVar, cast
import pendulum
from flask import after_this_request, g, request
from pendulum.parsing.exceptions import ParserError
from airflow.models import Log
from airflow.utils.session import create_session
T = TypeVar("T", bound=Callable)
logger = logging.getLogger(__name__)
def action_logging(func: Callable | None = None, event: str | None = None) -> Callable[[T], T]:
    """Decorator to log user actions"""
    def log_action(f: T) -> T:
        @functools.wraps(f)
        def wrapper(*args, **kwargs):
            __tracebackhide__ = True  
            with create_session() as session:
                if g.user.is_anonymous:
                    user = "anonymous"
                else:
                    user = g.user.username