fix(collect): ADO PR fetcher supports multiple projects (closes #91)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: bobmatnyc

.secrets.baseline

@@ -90,6 +90,10 @@
     {
       "path": "detect_secrets.filters.allowlist.is_line_allowlisted"
     },
+    {
+      "path": "detect_secrets.filters.common.is_baseline_file",
+      "filename": ".secrets.baseline"
+    },
     {
       "path": "detect_secrets.filters.common.is_ignored_due_to_verification_policies",
       "min_level": 2
@@ -122,6 +126,23 @@
       "path": "detect_secrets.filters.heuristic.is_templated_secret"
     }
   ],
-  "results": {},
-  "generated_at": "2026-05-11T14:31:45Z"
+  "results": {
+    "src/collect/azdo/pr_fetcher.rs": [
+      {
+        "type": "Hex High Entropy String",
+        "filename": "src/collect/azdo/pr_fetcher.rs",
+        "hashed_secret": "71c939e2c6cae2cef6d2c37282228f24cb5c1bb5",
+        "is_verified": false,
+        "line_number": 971
+      },
+      {
+        "type": "Hex High Entropy String",
+        "filename": "src/collect/azdo/pr_fetcher.rs",
+        "hashed_secret": "f5b2c8c6c50a224ef1830a900426d02e86a30c8a",
+        "is_verified": false,
+        "line_number": 1034
+      }
+    ]
+  },
+  "generated_at": "2026-05-18T20:37:51Z"
 }

src/collect/azdo/client.rs

@@ -76,6 +76,15 @@ pub enum AzdoError {
     /// Response body could not be parsed as the expected JSON shape.
     #[error("response parse error: {0}")]
     Parse(String),
+
+    /// Azure DevOps configuration failed validation at fetcher
+    /// construction time: both `project` and `projects` are empty/blank.
+    ///
+    /// Returning this from `AdoPrFetcher::new` is the load-bearing check
+    /// that prevents a misconfigured fetcher from silently returning
+    /// `Ok(None)` for every PR (issue #91 regression guard).
+    #[error("invalid Azure DevOps configuration: {0}")]
+    Config(String),
 }
 
 // ---------------------------------------------------------------------------
@@ -1537,7 +1546,8 @@ mod tests {
         AzureDevOpsConfig {
             organization_url: server_url.to_string(),
             pat: "secret-pat".into(),
-            project: "MyProject".into(),
+            project: Some("MyProject".into()),
+            projects: vec![],
             ticket_regex: r"AB#(\d+)".into(),
             team_keys: vec![],
             fetch_on_reference: true,
@@ -1549,7 +1559,8 @@ mod tests {
         AzureDevOpsConfig {
             organization_url: "https://dev.azure.com/myorg".into(),
             pat: "secret-pat".into(),
-            project: "MyProject".into(),
+            project: Some("MyProject".into()),
+            projects: vec![],
             ticket_regex: r"AB#(\d+)".into(),
             team_keys: vec![],
             fetch_on_reference: true,