pub fn redact_gh_error(message: &str) -> String
Redact ambient credentials while keeping GitHub’s actionable authorization, private-resource, and not-found diagnostics visible to the caller.