fix(security): prevent AssistantStream deltas leaking sensitive data (#2392)