Remove empty credentials from content URL in progress message

If the content URL has empty credentials (e.g., https://@gitlab.com/...), the @ is not being removed. Although this is harmless (since it doesn't reveal any sensitive information), it should be removed for consistency.