Secret Scanning in CI vs in the Pre-Commit Hook: Which Layer Should Catch It?

The question of where to run the secret scan has two popular answers, and both are right, and the...