[DevOps] Implement secret scanning and pre-commit hooks repo-wide

[Xoulomon]

Suggested Tier: Trivial (100 pts)

Description:
Prevent secrets from ever being committed with automated scanning in CI and locally.

Tasks:

• Add a secret-scanning CI job (e.g. gitleaks) on every PR
• Add a pre-commit hook (reuse husky) running the same scan locally
• Add an allowlist for known false positives
• Document remediation steps if a secret is detected

Acceptance Criteria:

• A test secret in a PR is caught and blocks the merge
• The local hook catches the same secret before commit

---

[oraimoitel]

@oraimoitel has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

Good morning 🌞🌄 Maintainer please can I work on this issue please 🙏🙏🙏

ℹ️ Repo Maintainers: To accept this application, review their application or assign @oraimoitel to this issue.

[Abdulmajeed82]

@Abdulmajeed82 has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

I would like to work on this issue pls

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Abdulmajeed82 to this issue.

[drips-wave]

Congratulations, @Abdulmajeed82! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on June 30, 2026.

🧑‍💻 @Abdulmajeed82: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊