pub fn redact_secret_value(value: &str) -> String
Redact a secret value for display. Always cosmetic; never returns the full value.