fix(network): скрыть GRE PSK и сохранить признак IPsec

lib/gre-export.test.ts

@@ -19,3 +19,8 @@ assert.ok(noInner.includes('local-address="192.0.2.10"'))
 assert.ok(noInner.includes("keepalive=0 dscp=12"))
 assert.ok(!noInner.includes("ipsec-secret="))
 console.log("gre-export: escaped strings, observed GRE/PSK only, optional IP and no duplicate IPsec passed")
+const masked = generateGreRsc({ ...tunnel, ipsec: { secret: '' } }, {})
+assert.ok(masked.includes('ipsec-secret="<IPSEC_PSK>"'))
+assert.ok(masked.includes('# Шаблон: ключ IPsec не раскрыт.'))
+assert.ok(!masked.includes('ipsec-secret=""'))
+console.log('gre-export: hidden configured PSK produces an explicitly labelled template, never an empty live key')