Constant REDACTED_SUFFIXES 

pub const REDACTED_SUFFIXES: &[&str];

Header-name suffixes that trigger redaction (case-insensitive match against the full header). Catches x-api-token, x-csrf-token, x-shared-secret, etc.