Function mask_username 

fn mask_username(username: &str) -> String

us***@example.com / ab*** style masking for the approval window’s display — enough for a human to recognize which saved login is being offered, not enough to be useful if somehow logged or screenshotted wrong. Keeps at most the first 2 characters before any masking.