Function sanitize_provider_diagnostic 

pub fn sanitize_provider_diagnostic(input: impl AsRef<[u8]>) -> String

Redact secrets and return a bounded, UTF-8-safe provider diagnostic.

The input is sampled with a carry window so a secret beginning near the output boundary is still redacted before the final size limit is applied.