Add publication risk scanner for private context leaks

Add a small script that checks public docs and skills for common publication risks.

Initial checks:
- private hostnames and personal paths
- credential terms and token patterns
- TODO/TBD placeholders
- references to private operational systems

The scanner should be conservative and documented so maintainers can tune it for their own projects.