ctxwise v1.0.1 patch

Fixes three edge cases in ctxwise shield reported via responsible disclosure:\n- Redacts captured values of generic-env-secret findings inside maskSnippet so detected credentials never appear in plaintext in CI logs.\n- Detects both quoted and unquoted credential assignments (including symbols @ . : $ ! % ^ & * ~) and ignores trailing inline comments.\n- Evaluates isPlaceholderSecret against the captured credential value rather than the full line.