# Secret scanning (gitleaks) — skip if not installed
if command -v gitleaks >/dev/null 2>&1; then
  gitleaks protect --staged --config .gitleaks.toml --no-banner
fi

pnpm lint-staged
