fn first_line(stderr: &[u8]) -> String
Git’s own words for a failed child: the first non-empty stderr line, uncapped so the redactor can see the whole URL before anything is cut.