[rust-guard] Deduplicate granular repo-write tool labeling and avoid repeated path scans in file secrecy checks#3967

lpcox merged 4 commits intomaingithub/gh-aw-mcpg:mainfrom

copilot/rust-guard-consolidate-duplicate-match-armsgithub/gh-aw-mcpg:copilot/rust-guard-consolidate-duplicate-match-armsCopy head branch name to clipboard