pub fn redact_db_url(db_url: &str) -> String
Redacts the user:password portion of a database URL for safe display. Returns "scheme://***@host/db" for URLs with userinfo, or the original URL otherwise.
"scheme://***@host/db"