pub fn record_to_masked_json(r: &VpsRecord) -> MaskedVpsJson
Builds a masked VPS JSON DTO (GAP-SSH-JSON-001).