Function redact 

pub fn redact(text: &str) -> String

Scrubs a string of anything that looks like a credential, an encoded JIT configuration, or a filesystem path.

Applied to every string this sink emits, including the ones whose field name is on ALLOWED_FIELDS. Also public so that the TUI and the CLI can put a value through the same rules before showing it, rather than inventing a second, differently wrong set.