- Add gitleaks secret scanning (full history) - Separate lint (ruff, Python 3.13 only) from test matrix - Test job gates on lint; gitleaks runs in parallel Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Matrix build: Python 3.11, 3.12, 3.13. Runs ruff lint and pytest on push/PR to master. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>