fix: fail closed on release input discovery

config/security/secret-scan-policy.json

@@ -9,13 +9,34 @@
     "public",
     "schemas",
     ".storybook",
+    ".gitea/workflows/quality-gates.yml",
+    ".dependency-cruiser.json",
+    ".nvmrc",
+    ".npmrc",
+    "eslint.config.ts",
+    "index.html",
     "package.json",
     "pnpm-lock.yaml",
+    "pnpm-workspace.yaml",
+    "tsconfig.json",
+    "tsconfig.app.json",
+    "tsconfig.base.json",
+    "tsconfig.node.json",
+    "tsconfig.recipes.json",
+    "tsconfig.service-worker.json",
+    "tsconfig.test.json",
+    "tsconfig.web-worker.json",
     "vite.config.ts",
+    "vite.service-worker.config.ts",
     "vitest.config.ts",
-    "playwright.config.ts"
+    "playwright.config.ts",
+    "playwright.capabilities.config.ts",
+    "playwright.dev.config.ts",
+    "playwright.storybook.config.ts",
+    "playwright.visual.config.ts"
   ],
   "generatedRoots": ["dist", "artifacts/release"],
+  "optionalRoots": ["artifacts/release"],
   "excludedPaths": [
     "tests/fixtures/security/secret-detection/forbidden"
   ],