Mask primary account numbers (PAN) for PCI-DSS compliance and secure logging (First 6 / Last 4 formatting).