fix: harden balance type-safety and precision handling (closes #227) #60

	name: Secret Scanning
	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	permissions:
	contents: read

	jobs:
	gitleaks:
	name: Detect leaked secrets
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- uses: gitleaks/gitleaks-action@v2
	with:
	config-path: .gitleaks.toml
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	verify:
	name: Verify credential exclusion
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Run secret verification checks
	run: ./scripts/verify-no-secrets.sh

Provide feedback