feat(xhs): add execution window and bb-browser login health checks

Merge pull request #3 from wangyaya-703/security/scan-all-branches

ci: run gitleaks on push for all branches

Merge pull request #2 from wangyaya-703/security/enforce-local-secret-gates

security: enforce pre-commit and pre-push secret gates

Merge pull request #1 from wangyaya-703/security/secret-guardrails

fix: make secret scanner compatible with gitleaks 8.30

config: update ark endpoint and model defaults

security: add pre-commit and CI secret scanning guardrails

security: pin github actions to commit SHA

security: add pre-commit and CI secret leak guard

security: remove hardcoded secrets and load from secrets.env

security: remove hardcoded feishu app credentials

feat: 添加旧版运行入口和独立报告生成器

docs: 添加中英双语 README，面向 Code Agent 配置