chore: add ggshield secret scan to husky pre-commit and pre-push hooks

Standard block from the Secrets Scanning (ggshield) setup, section 6.1.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Author: reeshika-h

.husky/pre-commit

@@ -1,4 +1,14 @@
 #!/usr/bin/env sh
+# >>> GitGuardian secret scan (managed by Contentstack Security) >>>
+if [ -z "${CI:-}" ]; then
+  if ! command -v ggshield >/dev/null 2>&1; then
+    echo "ggshield is not installed - secret scanning is required. Setup: https://contentstack.atlassian.net/wiki/x/FIDVEwE" >&2
+    exit 1
+  fi
+  ggshield secret scan pre-commit || exit 1
+fi
+# <<< GitGuardian secret scan <<<
+
 # Pre-commit hook to run Talisman and Snyk scans, completing both before deciding to commit
 
 # Function to check if a command exists

.husky/pre-push

@@ -1,4 +1,14 @@
 #!/usr/bin/env sh
+# >>> GitGuardian secret scan (managed by Contentstack Security) >>>
+if [ -z "${CI:-}" ]; then
+  if ! command -v ggshield >/dev/null 2>&1; then
+    echo "ggshield is not installed - secret scanning is required. Setup: https://contentstack.atlassian.net/wiki/x/FIDVEwE" >&2
+    exit 1
+  fi
+  ggshield secret scan pre-push "$@" || exit 1
+fi
+# <<< GitGuardian secret scan <<<
+
 
 echo "🚀 Running pre-push checks..."