GitHub secret scanning now detects Lovable API keys, Pydantic credentials and additional Supabase tokens.