Add security infrastructure for open source release

[Copilot]

Preparing AutoJSON for open source expansion requires security hardening: vulnerability reporting process, protection against accidental secret commits, and tooling to audit git history.

Changes

Security Policy (SECURITY.md)

• Vulnerability disclosure process with SLA commitments (48h initial, 7d update)
• Security best practices: local-only data processing, sensitive file handling, dependency monitoring
• Production deployment checklist covering GDPR/CCPA considerations

Enhanced .gitignore

Expanded from 67 to 356 lines covering:

• Secrets: .env, keys, certificates, credentials, database files
• Python: All build artifacts, venvs, pytest/coverage outputs
• IDEs: VSCode, PyCharm, Vim, Emacs, Sublime, Eclipse, NetBeans
• OS: macOS, Windows, Linux temp files

Git History Scanner (scripts/scan_git_history.py)

Detects accidentally committed secrets across all git history:

• File patterns: .env, .key, .pem, secret*, credential*
• Content patterns: API keys, tokens, passwords, private keys
• Platform-specific: AWS, GitHub, GitLab, Slack, Stripe, database connection strings
• Generates actionable reports with remediation steps

Usage:

python scripts/scan_git_history.py --output security_report.txt

Current repository scan: 0 issues detected

Documentation

• SECURITY_QUICK_REFERENCE.md: Command reference for security workflows
• Updated README.md and scripts/README.md with security sections

Original prompt

Generate a SECURITY.md file.
Create a PR to add enhanced .gitignore patterns.
Help scan git history for leaked files.

My aim is to make this project free and expand by open sources

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}