jwinterm 54fe344d14 security: scanner covers nsec/pepper classes; ignore bare-hex key files; PRIVACY.md ...

- tools/secret-scan.sh now also flags nsec1 Nostr secret keys and
  *_PEPPER/*_SALT/*INTEGRITY_SECRET hex assignments, the secret classes
  this backend actually handles (previously only PEM/seed shapes).
- .gitignore: *.hex + admin-key* so an operator running inside the
  checkout cannot commit the raw admin key (create-admin-wallet --out).
- PRIVACY.md pointing to the canonical smirk.cash/privacy, framed for
  self-hosting operators as independent data controllers.

2026-07-19 15:52:07 -04:00

..

secret-scan.sh

security: scanner covers nsec/pepper classes; ignore bare-hex key files; PRIVACY.md

2026-07-19 15:52:07 -04:00