feat(ci): add gitleaks to pre-commit hook

.husky/pre-commit

@@ -1 +1,13 @@
 npm run lint
+
+# Gitleaks secret scanning
+if command -v gitleaks &> /dev/null; then
+  gitleaks protect --verbose --staged
+  if [ $? -eq 1 ]; then
+    echo ""
+    echo "❌ Secrets detected in staged files!"
+    echo "Please remove sensitive data before committing."
+    echo ""
+    exit 1
+  fi
+fi