Function masked_tail 

pub fn masked_tail(secret: &str) -> String

Masked hint for the locked display: bullet run + last 4 chars. Stored alongside the account so the panel can render ••••••••3f9a without the secret. Keys shorter than 4 chars are fully masked (no tail leak).