Function mask_sensitive_command 

pub fn mask_sensitive_command(cmd: &str) -> String

Mask sensitive patterns in a command string before logging.

This prevents accidental exposure of API keys, passwords, and tokens that may be present in environment variables or command arguments.