GitHub now scans public issues for PyPI secrets

GitHub now detects and revokes exposed PyPI tokens in public repositories.