pub fn is_sensitive_header(name: &str) -> bool
Check if header is sensitive (should be masked in logs).