Fixed: add detect-secrets to pre-commit hooks

- Add detect-secrets v1.5.0 hook with baseline
- Create .secrets.baseline with empty results
- Exclude .env and xseed.sh from secret scanning

Author: bakerboy448

.pre-commit-config.yaml

@@ -20,6 +20,14 @@ repos:
       - id: check-shebang-scripts-are-executable
         name: check shebang scripts are executable
 
+  - repo: https://github.com/Yelp/detect-secrets
+    rev: v1.5.0
+    hooks:
+      - id: detect-secrets
+        name: detect secrets
+        args: ['--baseline', '.secrets.baseline']
+        exclude: '^(\.env|xseed\.sh)$'
+
   - repo: https://github.com/shellcheck-py/shellcheck-py
     rev: v0.10.0.1
     hooks:

.secrets.baseline

@@ -0,0 +1 @@
+{"version": "1.5.0", "plugins_used": [], "filters_used": [], "results": {}, "generated_at": "2025-10-31T04:20:20Z"}