Move output password removal after functional text matching

[m-czernek]

What does this PR do?

When a user uses a common dictionary password, like password, Salt replaces the word from the command buffer. Currently, this causes salt-ssh to hang when the remote is asking for password, because the word password is replaced and the text matching fails to detect that the ssh session hangs waiting for password input.

In this PR, I:

• Move the password removal step from text as the last thing we do before matching/processing the text.
• Improve the replacement to match whole word, not part of the word. For example, if the password is Server, we don't want to replace something like -o ServerAliveInterval=60 to -o ******AliveInterval=60. This makes the password easy to guess from the logs.

This change fixes regression caused by #62641

Note: Tests already exist, and were added as part of #62641.

What issues does this PR fix or reference?

Fixes #65787 #65406

Previous Behavior

Salt-ssh would fail to establish connection when connecting to host that uses the word password as password.

New Behavior

Salt-ssh establishes connection to hosts even when those hosts use password as password.

Merge requirements satisfied?

[NOTICE] Bug fixes or features added to Salt require tests.

• Docs
• Changelog - https://docs.saltproject.io/en/master/topics/development/changelog.html
• Tests written/updated

Commits signed with GPG?

Yes