[bugfix] Strip user information from repo.xml after deployment

Password is contained in clear text, which poses a security risk if access to the file is not properly restricted. Because the user info is only required during install, we can remove it after deployment.