redactHeadersForMeta function
Builds the REDACTED header map for meta.json: allowlisted headers keep
their values, everything else becomes REDACTED:<name> (case kept).
Implementation
Map<String, String> redactHeadersForMeta(Map<String, String> headers) {
final allowed = safeForensicHeaders.toSet();
return {
for (final entry in headers.entries)
entry.key: allowed.contains(entry.key.toLowerCase())
? entry.value
: 'REDACTED:${entry.key.toLowerCase()}',
};
}