[leomp12]

Summary

Fixes found while checking the stores' function logs:

• Frenet tracking: the cron resolved after the first code (codes.forEach(async ...) + resolve per code), so the remaining tracking updates could be cut when the function finished. Now it waits for all codes (Promise.allSettled, still in parallel).
• Tracking crons without the app: Frenet, Flash Courier and Melhor Envio read app[0] without checking it, logging an error every run on stores where the app isn't installed. Now they just skip.
• SSR fetchAndCache: concurrent renders shared the same Response, so all but the first failed with "Body has already been read". A failed or timed out fetch also stayed in runtimeFetchings forever, failing every next call for that key until the instance restarted. Now concurrent calls share the parsed data and the entry is cleared on settle. Callers (store sections) already catch errors, the throw contract is unchanged.
• Tokens in logs: the shared logger (@cloudcommerce/firebase/lib/config) now masks credential headers (Authorization, Access-Token, API keys, cookie) from Axios errors and request configs in log data, without mutating the original error. Covers the TikTok Access-Token in send-analytics-events and the store custom integrations that log error.config. Melhor Envio error handling now uses the shared logger and drops headers from its stringified configs.

Test plan

• Lint and build (tsc) of firebase, ssr, frenet, melhor-envio, flash-courier
• Logged a real Axios 401 with Authorization/Access-Token through logger.error(err), logger.warn(err, { request: { headers } }) and logger.error(err, { request: err.config }): all masked, stack kept, original error untouched

🤖 Generated with Claude Code

https://claude.ai/code/session_01AzZmcNMuAAjtyPLYYbnJBX