Redact credentials throughout publication recovery displays

internal/git/display.go

@@ -34,6 +34,9 @@ func displayDiagnostic(message string) string {
 	return httpURLSpan.ReplaceAllStringFunc(message, DisplayURL)
 }
 
+// DisplayDiagnostic redacts recognized HTTP credentials in a display string.
+func DisplayDiagnostic(message string) string { return displayDiagnostic(message) }
+
 type displayError struct{ cause error }
 
 func (err displayError) Error() string { return displayDiagnostic(err.cause.Error()) }