Block pull requests with exposed secrets from merging

GitHub adds a repository ruleset that blocks pull requests from merging when secret scanning alerts are present. The rule requires a completed scan and no open alerts, and can be enabled via UI or API. It is in public preview for Secret Protection and Advanced Security customers, extending pull‑request safety.