Leak Hunter
Prefer JSON output for agent workflows:
leak-hunter --json --min-risk 40 .
If running inside this source tree:
cargo run --quiet -- --json --min-risk 40 .
Keep redaction enabled unless the user explicitly asks for raw values. Do not publish unredacted reports.