secret scanning

Automated detection of hardcoded credentials or sensitive tokens in code and configs.