pub fn is_sensitive_file(path: &Path) -> Option<&'static str>Expand description
Check if a file is likely to contain sensitive data (secrets, credentials, keys).
Matches patterns from .gitignore for Node.js (.env family) plus
common credential/key files. Returns a human-readable reason if sensitive.