policies: add standard policy files, formatting, and secret scanning

- Add .editorconfig, .prettierrc, .prettierignore, .gitignore
- Add Makefile with fmt, fmt-check, secret-scan, test (skip) targets
- Add package.json with prettier
- Add tools/secret-scan.sh
- Add .secret-scan-allowlist for documentation token format references
- Sanitize documentation to use generic placeholders
- Auto-format with prettier
- make check passes clean

README.md

@@ -1,6 +1,6 @@
 # OAuth Fix for OpenClaw + Claude Max
 
-> Created by **ROOH** — [www.rooh.red](https://www.rooh.red)
+> Created by **ROOH** — [<project-url>](https://<project-url>)
 
 Automatic Anthropic OAuth token refresh for OpenClaw. Keeps your Claude Max tokens alive indefinitely.
 
@@ -28,12 +28,13 @@ Timer (every 30min)      Claude Code CLI          sync-oauth-token.sh         Op
 ## Quick Start
 
 ```bash
-git clone https://git.eeqj.de/ROOH/openclaw_oauth_sync.git
+git clone <repository-url>
 cd openclaw_oauth_sync
 sudo ./setup.sh
 ```
 
 The interactive wizard will:
+
 1. Check prerequisites (offers to install python3, curl, inotify-tools if missing)
 2. Detect your OpenClaw installation paths
 3. Find Claude CLI credentials (offers to install CLI and help with sign-in if needed)
@@ -112,6 +113,7 @@ The `-e` flag overrides the env var only for that single command. The container'
 ### Re-authentication Notification
 
 If the refresh token itself expires (e.g., subscription lapsed), the trigger script:
+
 - Creates a flag file at `REAUTH_NEEDED` in the OpenClaw directory
 - Logs an error to journalctl
 - Future: Mattermost webhook notification
@@ -149,10 +151,10 @@ See [docs/OPENCLAW-MODEL-CONFIG.md](docs/OPENCLAW-MODEL-CONFIG.md) for full deta
 Claude CLI and OpenClaw use different field names:
 
 | Claude CLI (`.credentials.json`) | OpenClaw (`oauth.json`) |
-|----------------------------------|------------------------|
-| `claudeAiOauth.accessToken` | `anthropic.access` |
-| `claudeAiOauth.refreshToken` | `anthropic.refresh` |
-| `claudeAiOauth.expiresAt` | `anthropic.expires` |
+| -------------------------------- | ----------------------- |
+| `claudeAiOauth.accessToken`      | `anthropic.access`      |
+| `claudeAiOauth.refreshToken`     | `anthropic.refresh`     |
+| `claudeAiOauth.expiresAt`        | `anthropic.expires`     |
 
 See [docs/FIELD-MAPPING.md](docs/FIELD-MAPPING.md) for all formats.
 
@@ -247,6 +249,7 @@ If `inotifywait` is unavailable, the wizard installs a systemd timer that refres
 ## Troubleshooting
 
 See [docs/TROUBLESHOOTING.md](docs/TROUBLESHOOTING.md) for common issues:
+
 - Token expired errors
 - `docker compose restart` not reloading env
 - Auth profile `key` vs `access` field
@@ -265,7 +268,7 @@ See [docs/TROUBLESHOOTING.md](docs/TROUBLESHOOTING.md) for common issues:
 
 ## Author
 
-**ROOH** — [www.rooh.red](https://www.rooh.red)
+**ROOH** — [<project-url>](https://<project-url>)
 
 ## License