Merge branch 'main' into dependabot/cargo/czech-file-knife/tantivy-0.26.1

Author: hyperpolymath

.github/workflows/secret-scanner.yml

@@ -56,7 +56,9 @@ jobs:
                 "czech-file-knife/docs/DISTRIBUTED_FILESYSTEMS.md",
                 "hybrid-automation-router/test/attestation/a2ml_test.exs",
                 "hybrid-automation-router/test/data_plane/transformers/kubernetes_test.exs",
-                "hybrid-automation-router/docs/HAR_SECURITY.md"
+                "hybrid-automation-router/docs/HAR_SECURITY.md",
+                "cicada/scripts/verify_rsr.jl",
+                "session-sentinel/.envrc"
               ]
             end)
             |> Enum.flat_map(fn rel_path ->
@@ -295,7 +297,7 @@ jobs:
 
           found=0
           for pattern in "${PATTERNS[@]}"; do
-            if grep -rn --include="*.rs" -E "$pattern" src/; then
+            if grep -rn --include="*.rs" -E "$pattern" src/ | grep -v "supersecretvalue123"; then
               echo "WARNING: Potential hardcoded secret found matching: $pattern"
               found=1
             fi