Secret Sentinel

Local secret guardrails: scan code, git changes and MCP configs for API keys; redact text