Added precommit hook to avoid commit secrets in src files. Added ci scan to avoid merge secrets in all files.