Which log file contains AEM application request and response entries?

A developer is creating a new OSGi bundle com.custom.package.b to expose new services.
com.custom.package.a is already installed and active in the system and has the following package definition:

The system console shows the following package availability:

Bundle com.custom.package.b to be installed has the following package definition:

What will happen when the developer uploads the bundle com.custom.package.b into the system?

The developer is presented with a component "Component A" which inherits from a component "Component B".
The dialog of Component A on path ../cq:dialog/../../items looks like:
+ align
- jcr:primaryType="nt:unstructured"
- sling:resourceType="granite/ui/components/coral/foundation/form/select"
- fieldLabel="Align Text"
- name="./align"
The dialog of Component B on path ../cq:dialog/../../items looks like:
+ title
- jcr:primaryType="nt:unstructured"
- sling:resourceType="granite/ui/components/coral/foundation/form/textarea"
- fieldLabel="Title"
- name="./title"
+ description
- jcr:primaryType="nt:unstructured"
- sling:resourceType="granite/ui/components/coral/foundation/form/textarea"
- fieldLabel="Description"
- name="./description"
The requirement for the dialog is that the *Align Text* field is shown after the *Title* field.
What should the developer do without changing Component B?

A custom AEM application contains a service component that needs to access the JCR repository within the activate method. The activate method uses ResourceResolverFactory.getServiceResourceResolver(...) without specifying a sub service name.
What should a developer do to make sure the user service mapping for the service component is available?

An application contains an OSGi configuration that contains a password.
How should a developer prevent this sensitive information from being stored in plain text in JCR?