Align identity-lock docs and CI with PR #90 review feedback

[Copilot]

This updates the two spots called out in the review thread: the IDENTITY_LOCK verification snippet and the CI enforcement around committed .env files. The goal is to keep the documented checks runnable and make CI match the repository’s actual no-.env policy.

• Docs: make verification commands shell-runnable

  • Replaced doubled line-continuation slashes in memory/IDENTITY_LOCK.md with actual shell continuations.
  • Normalized regex escaping in the example so the command can be copied directly into a shell.

  grep -rEn \
    -e "posthog" \
    -e "google-analytics" \
    -e "gtag\(" \
    /app/backend /app/frontend/src

• CI: enforce both forbidden .env files

  • Expanded the workflow check from backend/.env only to both backend/.env and frontend/.env.
  • Updated the step name and messages to reflect the broader policy.

• CI: clarify identity-leak scan scope

  • Removed the misleading comment that implied the identity-leak grep scans .env files.
  • Kept the scan focused on shipped source, public assets, and plugins, matching what the command actually inspects.

[Copilot]

Pull request overview

Updates the IDENTITY_LOCK verification documentation and CI checks to reflect PR #90 review feedback, ensuring the documented grep snippets are shell-runnable and CI more accurately enforces the repository’s no-committed-.env policy.

Changes:

• Fixed memory/IDENTITY_LOCK.md verification snippet line continuations / escaping so it can be copied and run in a shell.
• Updated CI to fail if either backend/.env or frontend/.env is committed, and clarified the identity-leak scan comment to match actual scan scope.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
memory/IDENTITY_LOCK.md	Makes the identity-leak verification grep snippet runnable (proper line continuations and escaping).
.github/workflows/ci.yml	Expands .env commit enforcement to backend + frontend and clarifies identity-leak scan scope comment.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.