Verify embedded credentials are stripped from copied git origin

The existing copy_to specs only proved we avoid the credential-bearing
configured URI. Add a case where the remote URI itself embeds a password
so the credential_filtered_uri stripping is exercised directly.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: hsbt

spec/bundler/source/git/git_proxy_spec.rb

@@ -124,6 +124,17 @@
         git_proxy.copy_to(destination)
       end
     end
+
+    context "when the remote URI embeds credentials" do
+      let(:uri) { "https://user:secret@github.com/ruby/rubygems.git" }
+
+      it "strips the password before writing origin" do
+        filtered_uri = "https://user@github.com/ruby/rubygems.git"
+        expect(git_proxy).not_to receive(:capture).with(["remote", "set-url", "origin", uri], destination)
+        expect(git_proxy).to receive(:capture).with(["remote", "set-url", "origin", filtered_uri], destination).and_return(["", "", clone_result])
+        git_proxy.copy_to(destination)
+      end
+    end
   end
 
   describe "#version" do