Function redact_mfa_secret 

pub const fn redact_mfa_secret() -> &'static str

Replace an MFA secret with a fixed placeholder. MFA secrets are always stored encrypted at rest; this helper exists so a stray log statement during development can’t accidentally write the plaintext.