- TYPESCRIPT-SETUP.md: replace stale git-secrets ref with gitleaks,
add .gitleaks.toml to copied files list, update expected verify output
- CI-SETUP.md: add secret-scan as first pipeline stage
- README.md: clarify gitleaks in "What You Get" and CI section
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>