Add infra artifact secret-scan guardrail

home/doris-dashboard/docs/baselines/README.md

@@ -29,3 +29,8 @@ See:
 2. Inspect them for secret-bearing fields.
 3. Commit only a markdown summary or an explicitly redacted artifact.
 4. Prefer human-readable summaries over raw appliance dumps.
+5. Enable the repo guardrail in each clone:
+   ```bash
+   git config core.hooksPath .githooks
+   chmod +x .githooks/pre-commit scripts/scan-secret-bearing-artifacts.sh
+   ```