Function sanitize_error_message 

pub fn sanitize_error_message(raw: &str) -> String

Truncate and strip obvious secret-looking substrings from an error message.

Does not attempt full redaction; callers must still avoid embedding payload/actor JSON in errors. Used before recording DLQ rows, ops-log fields, and admin-facing error text.