pub fn scan_unified_diff(diff: &str) -> Vec<SecretFinding>
Scan only added lines in a unified git diff.