fix(opencode): harden secret-read regex patterns#3295

Peldan wants to merge 4 commits into

microsoft:mainmicrosoft/agent-governance-toolkit:mainfrom

Peldan:fix/opencode-secret-read-bypassPeldan/agent-governance-toolkit:fix/opencode-secret-read-bypassCopy head branch name to clipboard