feat(web): add /zero-token landing page #51

	name: security

	on:
	pull_request:
	branches: [master, main]
	push:
	branches: [master, main]
	schedule:
	- cron: "11 6 * * 1"

	jobs:
	semgrep:
	name: semgrep
	runs-on: ubuntu-latest
	if: github.event_name != 'pull_request' \|\| github.event.pull_request.head.repo.full_name == github.repository
	container:
	image: semgrep/semgrep
	steps:
	- uses: actions/checkout@v4
	- run: \|
	semgrep scan --error --severity ERROR \
	--config p/javascript \
	--config p/typescript \
	--config p/owasp-top-ten \
	--config p/secrets

	bun-audit:
	name: bun audit
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: oven-sh/setup-bun@v2
	with:
	bun-version: "1.3"
	- name: Install dependencies
	run: bun install --frozen-lockfile
	- name: Audit dependencies
	run: bun audit --audit-level=high

	gitleaks:
	name: gitleaks
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- name: Install gitleaks
	run: \|
	VERSION=8.21.2
	curl -sSL "https://github.com/gitleaks/gitleaks/releases/download/v${VERSION}/gitleaks_${VERSION}_linux_x64.tar.gz" \
	\| tar -xz -C /usr/local/bin gitleaks
	gitleaks version
	- name: Scan history
	run: gitleaks detect --source . --redact --verbose --no-banner --exit-code 1

Provide feedback