How can we mask/hide password claim so the developers who are troubleshooting the journeys do not see users passwords?
You can only hide PII when App Insights is in Production mode.
https://learn.microsoft.com/en-us/azure/active-directory-b2c/troubleshoot-with-application-insights?pivots=b2c-custom-policy#configure-application-insights-in-production