Detect Postman API keys (PMAK-...)

[omerbek]

Postman API keys often end up in exported collections and environment files.

Format: PMAK- + 24 hex characters + - + 34 hex characters. Verify against Postman's docs.

How to do it

1. Add ("Postman API key", r"\bPMAK-[a-f0-9]{24}-[a-f0-9]{34}\b") (or your verified version) to SECRET_PATTERNS in repodx.py.
2. Add "PMAK-" to CANDIDATE_LITERALS.
3. Add the key to SecretScanTests.test_detects_provider_keys in tests/test_repodx.py, built with fake(...).
4. Run python3 -m unittest discover and python3 repodx.py . (must stay 100/100).

Comment here to claim it. One issue per person. See CONTRIBUTING.md. Never paste a real key.