feat(03-04): add GitHub Copilot, Cursor, Tabnine, Codeium, Sourcegraph providers

- GitHub Copilot with ghu_/gho_ token patterns
- Sourcegraph Cody with documented sgp_ high-confidence pattern
- Cursor, Tabnine, Codeium as keyword-only (no documented formats)

pkg/providers/definitions/codeium.yaml

@@ -0,0 +1,17 @@
+format_version: 1
+name: codeium
+display_name: Codeium (Windsurf)
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "codeium"
+  - "windsurf"
+  - "CODEIUM_API_KEY"
+  - "WINDSURF_API_KEY"
+  - "codeium.com"
+verify:
+  method: GET
+  url: ""
+  headers: {}
+  valid_status: []
+  invalid_status: []

pkg/providers/definitions/cursor.yaml

@@ -0,0 +1,17 @@
+format_version: 1
+name: cursor
+display_name: Cursor AI
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "cursor"
+  - "CURSOR_API_KEY"
+  - "cursor.sh"
+  - "cursor.com"
+  - "cursor-ide"
+verify:
+  method: GET
+  url: ""
+  headers: {}
+  valid_status: []
+  invalid_status: []

pkg/providers/definitions/github-copilot.yaml

@@ -0,0 +1,25 @@
+format_version: 1
+name: github-copilot
+display_name: GitHub Copilot
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "copilot"
+  - "github-copilot"
+  - "GITHUB_COPILOT_TOKEN"
+  - "api.githubcopilot.com"
+  - "copilot-internal"
+patterns:
+  - regex: 'ghu_[A-Za-z0-9]{36}'
+    entropy_min: 4.0
+    confidence: medium
+  - regex: 'gho_[A-Za-z0-9]{36}'
+    entropy_min: 4.0
+    confidence: medium
+verify:
+  method: GET
+  url: https://api.github.com/user
+  headers:
+    Authorization: "token {KEY}"
+  valid_status: [200]
+  invalid_status: [401, 403]

pkg/providers/definitions/sourcegraph.yaml

@@ -0,0 +1,26 @@
+format_version: 1
+name: sourcegraph
+display_name: Sourcegraph Cody
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "sourcegraph"
+  - "cody"
+  - "SRC_ACCESS_TOKEN"
+  - "SOURCEGRAPH_TOKEN"
+  - "sourcegraph.com"
+  - "sgp_"
+patterns:
+  - regex: 'sgp_[A-Fa-f0-9]{16,}_[A-Fa-f0-9]{40}'
+    entropy_min: 4.0
+    confidence: high
+  - regex: 'sgp_[A-Fa-f0-9]{40}'
+    entropy_min: 4.0
+    confidence: medium
+verify:
+  method: GET
+  url: https://sourcegraph.com/.api/graphql
+  headers:
+    Authorization: "token {KEY}"
+  valid_status: [200]
+  invalid_status: [401, 403]

pkg/providers/definitions/tabnine.yaml

@@ -0,0 +1,16 @@
+format_version: 1
+name: tabnine
+display_name: Tabnine
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "tabnine"
+  - "TABNINE_API_KEY"
+  - "api.tabnine.com"
+  - "tabnine-pro"
+verify:
+  method: GET
+  url: ""
+  headers: {}
+  valid_status: []
+  invalid_status: []

providers/codeium.yaml

@@ -0,0 +1,17 @@
+format_version: 1
+name: codeium
+display_name: Codeium (Windsurf)
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "codeium"
+  - "windsurf"
+  - "CODEIUM_API_KEY"
+  - "WINDSURF_API_KEY"
+  - "codeium.com"
+verify:
+  method: GET
+  url: ""
+  headers: {}
+  valid_status: []
+  invalid_status: []

providers/cursor.yaml

@@ -0,0 +1,17 @@
+format_version: 1
+name: cursor
+display_name: Cursor AI
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "cursor"
+  - "CURSOR_API_KEY"
+  - "cursor.sh"
+  - "cursor.com"
+  - "cursor-ide"
+verify:
+  method: GET
+  url: ""
+  headers: {}
+  valid_status: []
+  invalid_status: []

providers/github-copilot.yaml

@@ -0,0 +1,25 @@
+format_version: 1
+name: github-copilot
+display_name: GitHub Copilot
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "copilot"
+  - "github-copilot"
+  - "GITHUB_COPILOT_TOKEN"
+  - "api.githubcopilot.com"
+  - "copilot-internal"
+patterns:
+  - regex: 'ghu_[A-Za-z0-9]{36}'
+    entropy_min: 4.0
+    confidence: medium
+  - regex: 'gho_[A-Za-z0-9]{36}'
+    entropy_min: 4.0
+    confidence: medium
+verify:
+  method: GET
+  url: https://api.github.com/user
+  headers:
+    Authorization: "token {KEY}"
+  valid_status: [200]
+  invalid_status: [401, 403]

providers/sourcegraph.yaml

@@ -0,0 +1,26 @@
+format_version: 1
+name: sourcegraph
+display_name: Sourcegraph Cody
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "sourcegraph"
+  - "cody"
+  - "SRC_ACCESS_TOKEN"
+  - "SOURCEGRAPH_TOKEN"
+  - "sourcegraph.com"
+  - "sgp_"
+patterns:
+  - regex: 'sgp_[A-Fa-f0-9]{16,}_[A-Fa-f0-9]{40}'
+    entropy_min: 4.0
+    confidence: high
+  - regex: 'sgp_[A-Fa-f0-9]{40}'
+    entropy_min: 4.0
+    confidence: medium
+verify:
+  method: GET
+  url: https://sourcegraph.com/.api/graphql
+  headers:
+    Authorization: "token {KEY}"
+  valid_status: [200]
+  invalid_status: [401, 403]

providers/tabnine.yaml

@@ -0,0 +1,16 @@
+format_version: 1
+name: tabnine
+display_name: Tabnine
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "tabnine"
+  - "TABNINE_API_KEY"
+  - "api.tabnine.com"
+  - "tabnine-pro"
+verify:
+  method: GET
+  url: ""
+  headers: {}
+  valid_status: []
+  invalid_status: []