release: cut v1.0.5 with optional token-hash logging

- add printTokenHashes input (default false)\n- gate SHA256 hash output behind input flag\n- update marketplace overview example to consume outputs clearly\n- bump task and extension versions to 1.0.5

overview.md

@@ -15,6 +15,7 @@ It is designed for pipelines that need ARM federation variables without storing
 
 - `serviceConnectionARM` (required): Azure Resource Manager service connection
 - `setGitAccessToken` (optional): exchanges OIDC assertion for Azure DevOps scope and sets `GIT_ACCESS_TOKEN`
+- `printTokenHashes` (optional, default `false`): prints SHA256 token hashes in logs
 
 ## Prerequisites
 
@@ -29,6 +30,19 @@ It is designed for pipelines that need ARM federation variables without storing
   inputs:
     serviceConnectionARM: 'my-arm-service-connection'
     setGitAccessToken: true
+    printTokenHashes: false
+
+- bash: |
+    echo "Tenant: $ARM_TENANT_ID"
+    if [[ ! "$ARM_CLIENT_ID" =~ ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$ ]]; then
+      echo "ARM_CLIENT_ID is missing or not a GUID"
+      exit 1
+    fi
+    test -n "${ARM_OIDC_TOKEN:-}" && echo "ARM_OIDC_TOKEN is set and not empty"
+    test -n "${GIT_ACCESS_TOKEN:-}" && echo "GIT_ACCESS_TOKEN is set and not empty"
+  env:
+    ARM_OIDC_TOKEN: $(ARM_OIDC_TOKEN)
+    GIT_ACCESS_TOKEN: $(GIT_ACCESS_TOKEN)
 ```
 
 ## Repository