🛡️ push-scanner Live Pre-Publish Audit

Pre-publish security gate testing leaked secrets, sourcemaps, dangerous lifecycle scripts, and AI signals.