pub const fn redact_password() -> &'static str
Replace any password-like value with a fixed placeholder. Use this in summary strings and error messages — never the real password, not even truncated.