Sensitive-data disclosure via inverted changes-map sensitivity check

Information disclosure in Ash Framework AshPaperTrail 0.1.1 through 0.6.0 allows attackers to read plaintext sensitive attributes. CreateVersionResource derives the changes map's sensitivity from ignored attributes instead of tracked attributes, leaving the public map non-sensitive and exposing stored values through reads, logs, inspect output, and errors. The tracked resource must contain a sensitive attribute outside ignore_attributes, and the attacker must have read access to its generated version resource.