feat: add modern credential dorks

[techgaun]

Summary

• add 37 modern credential searches, growing the dictionary from 90 to 127 active dorks
• cover GitHub and GitLab tokens, package registries, AI providers, cloud/IaC, deployment platforms, payments, communications, databases, service accounts, and modern private keys
• group new entries by credential family
• document primary vendor sources for token prefixes and canonical environment variables
• add integrity tests for duplicates, surrounding whitespace, balanced quotes, and expected credential families

Review notes

The new entries favor documented token prefixes when available. Providers without stable public formats use canonical environment-variable names scoped to likely secret files to reduce noise. Matches still require manual validation and should only be investigated with authorization.

Impact

Mostly High: API tokens, access tokens, service-role keys, live payment keys, connection strings, service-account private keys, and cryptographic private keys can grant access to user or organizational resources.

Sources

See docs/dork-sources.md for official vendor references, including GitHub, GitLab, npm, PyPI, OpenAI, Claude, Hugging Face, HCP Terraform, Cloudflare, DigitalOcean, Pulumi, Vercel, Supabase, and Sentry.

Verification

• python3 -m unittest discover -s tests -v (7 tests)
• git diff --check
• 127 active dorks, with no exact duplicates