Scan a public GitHub x402 repository before launch

Reads a bounded set of public repository evidence through GitHub's API and returns seven file-level checks with remediation. Sensitive-looking filenames are listed but not downloaded. The scanner does not execute code, inspect private repositories or git history, return repository contents, probe a deployed endpoint, or verify settlement.