Sanitizes exception messages so that sensitive data is never surfaced.
Returns a short, non-sensitive message derived from e, falling back to fallback when the message is empty or looks like it could leak secrets.