🔒 Security: Add comprehensive credential protection

[vanman2024]

Security Enhancement

Add comprehensive credential protection to prevent API key exposure.

What's Added:

1. .gitleaks.toml

   • Strict secret detection configuration
   • Custom rules for documentation files
   • Catches Google, Supabase, Clerk, Stripe keys

2. scripts/sanitize-env-for-docs.sh

   • Sanitizes environment variables for documentation
   • Prevents real credentials in docs
   • Provides safe placeholders

3. docs/CREDENTIAL-SAFETY.md

   • Complete security guidelines
   • Emergency response procedures
   • Best practices for doc generation

4. .git-hooks/pre-commit

   • Pre-commit hook for gitleaks
   • Prevents committing secrets
   • Runs automatically before each commit

Setup:

After merging, team members should:

# Install gitleaks (one-time)
brew install gitleaks  # macOS
# or https://github.com/gitleaks/gitleaks

# Install pre-commit hook (one-time per repo)
cp .git-hooks/pre-commit .git/hooks/pre-commit
chmod +x .git/hooks/pre-commit

For Doc Generators:

When creating documentation with API keys:

source scripts/sanitize-env-for-docs.sh
echo "GOOGLE_API_KEY=$SANITIZED_GOOGLE_API_KEY"
# Output: GOOGLE_API_KEY=your_google_api_key_here

🤖 Generated with Claude Code