A contractor's public repo exposed 844MB of sensitive data including AWS GovCloud credentials, Kubernetes configs, and CI/CD logs for half a year.