moltenhub-security-secret-audit-and-hardening

[jefking]

Summary

• performed a repository secret audit across tracked files and reachable git history
• no committed credentials were found that required removal
• hardened the repo to reduce accidental secret commits by adding credential/key ignore patterns
• added CI secret scanning with gitleaks on push/PR

Validation

• go test ./...
• regex-based secret scan across working tree
• regex-based secret scan across git history

Notes

• this PR intentionally contains no credential redactions because none were detected in repository contents/history.