Module redact 

Functions

redact_secrets

Replace tokens containing known secret patterns with [REDACTED].

sanitize_paths

Replace absolute filesystem paths with [PATH] to prevent information disclosure.

scrub_content

Apply both secret redaction and path sanitization in a single pass.