Security-related rules

@herodevs/cli

matches = ["**/*.{ts,js,json}"] pattern = "(?i)(password|secret|token|key).*=.*['\"][^\s]{8,}['\"]" message = "Potential secret detected in source code. Use environment variables instead." }