fix: commit semantic repair changes

scripts/scan_secrets.sh

@@ -1,4 +1,8 @@
 #!/usr/bin/env bash
+# [DEF:scan_secrets:Module]
+# @PURPOSE: Utility script for scan_secrets
+# @TIER: TRIVIAL
+# @COMPLEXITY: 1
 set -euo pipefail
 
 ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
@@ -21,3 +25,5 @@ git grep -nIE \
   '(AKIA[0-9A-Z]{16}|ASIA[0-9A-Z]{16}|AIza[0-9A-Za-z\-_]{35}|sk_live_[0-9A-Za-z]{16,}|sk_test_[0-9A-Za-z]{16,}|gh[pousr]_[A-Za-z0-9_]{20,}|github_pat_[A-Za-z0-9_]{20,}|glpat-[A-Za-z0-9\-_]{20,}|hf_[A-Za-z0-9]{20,}|-----BEGIN (RSA |DSA |EC |OPENSSH |PGP )?PRIVATE KEY-----|https?://[^/@[:space:]]+:[^@[:space:]]+@|ENCRYPTION_KEY[[:space:]]*=|AUTH_SECRET_KEY[[:space:]]*=)' \
   $(git rev-list --all) \
   | rg -v 'oauth2:(token|secret)@' || true
+
+# [/DEF:scan_secrets:Module]