Add gitleaks pre-commit hook for secret detection

.gitleaks.toml

@@ -0,0 +1,9 @@
+title = "gitleaks config"
+
+[allowlist]
+  description = "Global allowlist"
+  paths = [
+    '(.*)?\.lock$',
+    '(.*)?package-lock\.json$',
+  ]
+

.pre-commit-config.yaml

@@ -0,0 +1,6 @@
+repos:
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.30.1
+    hooks:
+      - id: gitleaks
+

README.md

@@ -110,3 +110,13 @@ dotnet run
 | [`app_dotnet_angular_containerized_decomposition_microfrontends`](https://github.com/Cognition-Partner-Workshops/app_dotnet_angular_containerized_decomposition_microfrontends) | Angular micro-frontends target |
 | [`app_dotnet_angular_containerized_decomposition_iac`](https://github.com/Cognition-Partner-Workshops/app_dotnet_angular_containerized_decomposition_iac) | App-specific Helm charts |
 | [`platform-engineering-shared-services`](https://github.com/Cognition-Partner-Workshops/platform-engineering-shared-services) | Shared EKS cluster and platform infra |
+
+## Pre-commit Hooks
+
+This repository uses [pre-commit](https://pre-commit.com/) with [gitleaks](https://github.com/gitleaks/gitleaks) for secret detection.
+
+### Setup
+1. Install pre-commit: `pip install pre-commit`
+2. Install the hooks: `pre-commit install`
+3. (Optional) Run against all files: `pre-commit run --all-files`
+