Function mask_credential 

pub fn mask_credential(s: &str) -> String

Mask a credential string for safe display.

Keeps the first 6 and last 4 characters for long values so users can verify which credential is in use without exposing the full secret. Short values (≤ 10 chars) are fully obscured.