Function export_hosts_to_json 

pub fn export_hosts_to_json(
    hosts: &BTreeMap<String, VpsRecord>,
    include_secrets: bool,
) -> Value

GAP-SSH-UX-001: hosts for vps export --json.

• Redacted (include_secrets=false): secrets vazios/null, nunca ciphertext sshcli-enc: (EXP-001 parity). Empty password → "" in export envelope (honest skeleton).
• With secrets: plaintext password only if --include-secrets (same risk as TOML).