Extracts scrubUrl/scrubString/scrubObject into src/lib/scrub.ts (no RN deps) so they can be tested with node --test without native module issues. Adds src/lib/scrub.test.ts with 13 test cases covering: - basic-auth credential stripping - query-param secret redaction (token, api_key, password, access_token) - clean URL passthrough - mixed-param URL (only secrets redacted) - embedded URL in error message strings - nested object recursive scrubbing - non-string value preservation Closes #40 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>