nhtua/rayloc ? reverse-engineered prompt

Build me a fast offline secret scanner for Git repos, written in Rust.

I want a command line tool that can scan a whole folder, a single file, staged changes, or a diff against a commit, and catch common secrets like AWS keys, GitHub tokens, Stripe keys, Slack webhooks, private keys, JWTs, and obvious high entropy strings. It should never print the full secret value, only a masked version, and it should be able to block commits with a pre commit hook.

Please include support for a simple repo config file so I can turn rules on or off, add my own regex based rules, and ignore certain files or paths. I also want a way to accept a false positive by ID after review. Keep it single binary, quick to run, and offline with no network access. If anything is unclear, look up current docs online if you need to.