- TYPESCRIPT-SETUP.md: replace stale git-secrets ref with gitleaks, add .gitleaks.toml to copied files list, update expected verify output - CI-SETUP.md: add secret-scan as first pipeline stage - README.md: clarify gitleaks in "What You Get" and CI section Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>