Warn users about secret config values

[jordanstephens]

Customers are storing secrets as plain text environment variables, this is a security risk for the customers, the plain text secrets should not leave the user's computer.

• Identify a suitable secret-detection algorithm (consider https://github.com/Yelp/detect-secrets)
• CLI should be able to detect secrets and suggest using defang config instead

[lionello]

Can't find what GitHub uses but their docs are here: https://docs.github.com/en/enterprise-cloud@latest/code-security/secret-scanning/secret-scanning-patterns#supported-secrets

Yelp has https://github.com/Yelp/detect-secrets which works well for our cause, it found all secrets in one of our tenants:

[
      {
        "type": "Base64 High Entropy String",
        "filename": "ii",
        "hashed_secret": "5441477719707ecbf36feed87dd3e2916004887b",
        "is_verified": false,
        "line_number": 15
      },
      {
        "type": "Secret Keyword",
        "filename": "ii",
        "hashed_secret": "5441477719707ecbf36feed87dd3e2916004887b",
        "is_verified": false,
        "line_number": 15
      },
      {
        "type": "Base64 High Entropy String",
        "filename": "ii",
        "hashed_secret": "87f33ee635332cf5987b3a84b07271ccaca01b75",
        "is_verified": false,
        "line_number": 16
      },
      {
        "type": "Secret Keyword",
        "filename": "ii",
        "hashed_secret": "87f33ee635332cf5987b3a84b07271ccaca01b75",
        "is_verified": false,
        "line_number": 16
      },
      {
        "type": "Basic Auth Credentials",
        "filename": "ii",
        "hashed_secret": "7f5339e9175001ce2287e521265100274df0b761",
        "is_verified": false,
        "line_number": 18
      },
      {
        "type": "Basic Auth Credentials",
        "filename": "ii",
        "hashed_secret": "1ee439b2de2e90309ce03e8c14c0f84b06b43d76",
        "is_verified": false,
        "line_number": 19
      }
   ]

[lionello]

Golang "fork" https://github.com/DefangLabs/secret-detector