Claude Code's "don't ask again" button is leaking passwords and API keys to public GitHub repos TechSpot