There are still references like SECRET_SCANNING in the codebase, but
those are _mostly_ to do with user-facing strings which do still display
"Secret scanning", so I've left those as-is.