docs: address PR review comments on environment-overrides

- Add note about product-scoped auto-generated subscriptions being skipped
- Replace sample hex ID with placeholder to avoid secret scanner triggers

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: Peter Hauge

docs/guides/environment-overrides.md

@@ -252,6 +252,7 @@ subscriptions:
 ```
 
 > **Note:** The built-in `master` subscription is automatically skipped during publish.
+> Product-scoped subscriptions auto-generated by APIM are also skipped to avoid subscription limit errors.
 
 ### Products
 
@@ -449,7 +450,7 @@ When using Key Vault references, the APIM managed identity needs access to the K
 
 ### Gotcha: Auto-generated named values for loggers
 
-When you create a logger in APIM (e.g., for Application Insights), APIM auto-generates a named value to store the credential. These have 24-character hex names like `66f48e1226dab62c0823e4f8`. During extract, these are captured as artifacts. During publish:
+When you create a logger in APIM (e.g., for Application Insights), APIM auto-generates a named value to store the credential. These have 24-character hex names (e.g., `<24-char-hex-id>`). During extract, these are captured as artifacts. During publish:
 
 - **Same environment:** Auto-generated named values are skipped (APIM already has them).
 - **Fresh environment:** The logger fails because the named value doesn't exist yet. Provide an override with the target environment's credential value, or override the logger's `credentials` directly.