Add publication risk scanner for private context leaks

[TheRobertRay]

Add a lightweight scanner that checks examples, docs, and skills for private hostnames, local-only paths, secret-like strings, and stale application claims before publishing.