Fix the implementation in `/app/solution.mjs`. Mask an email local part, retaining only its first character; reject malformed input. Preserve the exported `solve` API and run the available tests.