Preventing secret leaks: Gitleaks scanning and CI gate practice

Stop secret leaks with Gitleaks workspace and history scans, CI gates, false-positive handling, credential rotation, and risky history rewrites. Copyable commands and pipeline snippets make Secret Scanning a default blocking control.