redactPrompt function
Masks secrets in prompt before it reaches the provider/session
(issue #24 AC8). Counted under the user_input tool name.
Implementation
String redactPrompt(RedactionPipeline pipeline, String prompt) {
final redacted = pipeline.redact(prompt);
if (redacted != prompt) pipeline.stats.record('user_input');
return redacted;
}