Configuration Audit

Write auditConfig(config) — config is an object like { dbUrl, apiKey, sessionSecret, nodeEnv, gitignoredEnv: bool, hardcoded: [names] }. Findings (in order): any of dbUrl/apiKey/sessionSecret present AND gitignoredEnv false => "secrets-in-repo"; hardcoded.length > 0 => "hardcoded-credentials"; nodeEnv === "development" => "dev-config-in-prod" (only when checking production config); else "clean".

Difficulty: intermediate