Leaking Secrets — playbook

API keys in the client bundle, tokens in git history. Where secrets actually leak and the checks that stop it.