DEFAULT_REDACTED_HEADERS

Header names redacted by toCurl. Matched case-insensitively, since header casing is not guaranteed by anything.

Authorization is the one that matters: the entire purpose of toCurl is to produce something you paste somewhere else — a terminal, a ticket, a chat thread — and an unredacted bearer token pasted into any of those is a live credential leak. A debug affordance that quietly exfiltrates credentials is worse than no debug affordance.