Block secrets and PII before they land: regex + entropy scanning for files, diffs, and AI coding agents (CLI + MCP + skill + pi extension).