Function scan_secrets 

pub fn scan_secrets(input: &str) -> Vec<&'static str>

Returns the distinct credential categories detected in input (e.g. ["openai_key", "github_pat"]), or empty if none.