pub fn scrub_output(server: &str, text: &str) -> String
Redact secrets from a downstream addon’s tool output and emit an audit trace marking it untrusted. Returns the scrubbed text the model will see.