[FEATURE] add precommit hooks for API keys when setting up repos for git

Preflight Checklist

• [x] I have searched existing requests and this feature hasn't been requested yet
• [x] This is a single feature request (not multiple features)

Problem Statement

I accidentally checked a secret in (it wasn't in .env - it was in a different file). Pre-commit hooks to block this are best practice.

Proposed Solution

• Default .pre-commit-config.yaml with gitleaks/detect-secrets when initializing repos
• Warning when staging files that match secret patterns

Alternative Solutions

_No response_

Priority

Critical - Blocking my work

Feature Category

CLI commands and flags

Use Case Example

_No response_

Additional Context

_No response_