Deterministic secret and hazard scan for a code snippet. Returns masked findings, severity counts and a 0-100 score.