Passively discovers API keys, tokens, and secrets leaked in page scripts, DOM, network responses, and browser storage.
