Secret-scan: find leaked secrets in your repo – one zero-dependency Python file