Automate secrets detection in workflows and add documentation for secret management #33
Description
The repository asks contributors not to commit secrets/tokens, but currently lacks automation for checking this. Please implement:
- GitHub Actions or pre-commit hook to detect hardcoded secrets or tokens in workflows and source code
- Documentation on secret-management best practices
- Guidelines on rotating secrets and handling accidental commits
This will reduce the risk of credential leaks.