CI: restore main detect-secrets scan (#38438)

* Tests: stabilize detect-secrets fixtures

* Tests: fix rebased detect-secrets false positives

* Docs: keep snippets valid under detect-secrets

* Tests: finalize detect-secrets false-positive fixes

* Tests: reduce detect-secrets false positives

* Tests: keep detect-secrets pragmas inline

* Tests: remediate next detect-secrets batch

* Tests: tighten detect-secrets allowlists

* Tests: stabilize detect-secrets formatter drift

src/browser/bridge-server.auth.test.ts

@@ -90,7 +90,7 @@ describe("startBrowserBridgeServer auth", () => {
         if (token !== "valid-token") {
           return null;
         }
-        return { noVncPort: 45678, password: "Abc123xy" };
+        return { noVncPort: 45678, password: "Abc123xy" }; // pragma: allowlist secret
       },
     });
     servers.push({ stop: () => stopBrowserBridgeServer(bridge.server) });