fix: ignore hardcoded test password in rust-secrets

Author: hyperpolymath

bots/cipherbot/src/analyzers/infra.rs

@@ -186,7 +186,7 @@ mod tests {
     #[test]
     fn test_detect_hardcoded_cred() {
         let analyzer = InfraAnalyzer;
-        let content = r#"password = "SuperSecretPass123!""#;
+        let content = r#"password = "SuperSecretPass123!""#; // scanner-allow: rust-secrets
         let usages = analyzer.analyze_content(Path::new("infra/main.tf"), content);
         assert!(!usages.is_empty(), "Should detect hardcoded credential");
         assert_eq!(usages[0].status, CryptoStatus::Reject);
@@ -204,7 +204,7 @@ mod tests {
     #[test]
     fn test_skip_non_infra_file() {
         let analyzer = InfraAnalyzer;
-        let content = r#"password = "SuperSecretPass123!""#;
+        let content = r#"password = "SuperSecretPass123!""#; // scanner-allow: rust-secrets
         let usages = analyzer.analyze_content(Path::new("src/main.rs"), content);
         assert!(usages.is_empty(), "Should skip non-IaC files");
     }