Implement secret scanning in Repo1

Since repo1 is the home to big bang bootstraps and many vendor applications, it would be a good idea to have a secret scanner watching for secrets committed to repos.

Potential tools