#!/bin/sh
# Content-based secret gate. See scripts/check_secrets.py for why this exists
# rather than relying on .gitignore alone (2026-07-27 leak).
# Enable once per clone:  git config core.hooksPath .githooks
python "$(git rev-parse --show-toplevel)/scripts/check_secrets.py" --staged || exit 1
