Claim checker for public texts (TypeSafe), measured manifest load times, corrected README timings

.gitea/workflows/ci.yml

@@ -17,7 +17,7 @@ jobs:
           python-version: ${{ matrix.python }}
       - name: Secret scan (no cloud keys or private keys in the repository)
         run: |
-          if git grep -nIE '(AKIA|ASIA)[A-Z0-9]{16}|aws_secret_access_key *=|BEGIN [A-Z ]*PRIVATE KEY'; then
+          if git grep -nIE '(AKIA|ASIA)[A-Z0-9]{16}|aws_secret_access_key *=|BEGIN [A-Z ]*PRIVATE KEY|apikey_[0-9a-f]{20,}'; then
             echo "::error::credential-like content found"; exit 1
           fi
       - name: Install