CI: restore main detect-secrets scan (#38438)

* Tests: stabilize detect-secrets fixtures

* Tests: fix rebased detect-secrets false positives

* Docs: keep snippets valid under detect-secrets

* Tests: finalize detect-secrets false-positive fixes

* Tests: reduce detect-secrets false positives

* Tests: keep detect-secrets pragmas inline

* Tests: remediate next detect-secrets batch

* Tests: tighten detect-secrets allowlists

* Tests: stabilize detect-secrets formatter drift

src/commands/auth-choice.apply.volcengine-byteplus.test.ts

@@ -52,7 +52,7 @@ describe("volcengine/byteplus auth choice", () => {
       defaultSelect?: string;
       confirmResult?: boolean;
       textValue?: string;
-      secretInputMode?: "ref";
+      secretInputMode?: "ref"; // pragma: allowlist secret
     },
   ) {
     const agentDir = await setupTempState();