Function is_credential_key 

pub fn is_credential_key(key: &str) -> bool

Whether a JSON key denotes a credential value on a human-facing surface.

Keep every rendering boundary on this classifier so a top-level scalar does not lose the credential context before structured redaction can inspect it.