Secret hygiene: rotate Linear key, purge history, add gitleaks

Context
- Linear API key appeared in history: commit 461c6d1… in .kilocode/mcp.json.

Acceptance Criteria
- History cleaned; Push Protection no longer blocks.
- Leaked key confirmed revoked.