Refactor code to use 'any' type and improve context handling

main.go

@@ -449,8 +449,8 @@ func resolveVcenterPassword(logger *slog.Logger, cipher *secrets.Secrets, legacy
 	}
 
 	// New format: explicit prefix so we can distinguish ciphertext from plaintext safely.
-	if strings.HasPrefix(raw, encryptedVcenterPasswordPrefix) {
-		enc := strings.TrimPrefix(raw, encryptedVcenterPasswordPrefix)
+	if after, ok := strings.CutPrefix(raw, encryptedVcenterPasswordPrefix); ok {
+		enc := after
 		pass, usedLegacyKey, err := decryptVcenterPasswordWithFallback(logger, cipher, legacyDecryptKeys, enc)
 		if err != nil {
 			return nil, "", fmt.Errorf("prefixed password decrypt failed: %w", err)