Secrets Auditor 🛡️

🔑 Catch a leaked private key, API key, or wallet address before it ships. One read-only, heuristic command scans your path for secrets, PII, and committed export artifacts — clean exit 0, or a human-reviewed findings list. Standalone — runs independently with no dependency on the other auditors. Your last pre-publish check — pair with egress-auditor (leaks out) + dependency-auditor (what you pull in) for a complete ship-readiness gate. Install `publisher-qc` for the full gate as one command — it auto-installs all three auditors and runs them together.