fn mask_secrets(sql: String, secrets: &[&str]) -> String
Helper function to mask multiple secrets in a string.