Expand Secret Revocation to support private repositories

Proposal

With the work completed in #371658 (closed) we will now auto-revoke leaked PATs in public projects. We should explore expanding this support to auto-revocation leaked pats in private projects, as well.

Based on #385690 (closed) we should consider whether to enable this behavior by default or make it opt-in

Links

• See recent (non-public) Looking forward discussion
• Logic limitation revocation to public projects