pub fn profile_suffix(profile: Option<&str>) -> StringExpand description
Renders (profile '<name>') for credential-store CLI messages, or the
empty string when no profile is active — so auth login/logout output
names the env map it actually wrote to (issue #1116).