feat: improve form results and harden secrets

docker-compose.yml

@@ -6,8 +6,8 @@ services:
       - "8606:80"
     expose:
       - "3000"
-    env_file: 
-      .env
+    env_file:
+      - .env
 
   nginx:
     image: nginx:alpine
@@ -17,3 +17,16 @@ services:
       - app
     network_mode: "service:app"
     restart: unless-stopped
+
+  secret-scan:
+    image: ghcr.io/gitleaks/gitleaks:v8.30.1
+    profiles:
+      - tools
+    working_dir: /repo
+    volumes:
+      - .:/repo:ro
+    command:
+      - git
+      - --redact
+      - --no-banner
+      - .