Stop logging PG tokens and classify authentication failures

[JasonAtClockwork]

Follow-up from #5640.
crates/pg/src/pg_server.rs, remove the supplied token used as identity from authentication logs and distinguish invalid credentials from identity-provider failures so they can use appropriate log levels.