Secret Scanning: Gitleaks, TruffleHog and Pipeline CI/CD

Automate secret scanning with Gitleaks pre-commit and TruffleHog in CI/CD: lock API keys and tokens, verify leaks, and remove secrets from Git history.