* fix line numbers for duplicate secrets within a chunk * fix-test: use cmpopts.IgnoreUnexported instead of cmpopts.IgnoreFields * refactor: unify FragmentLineOffset offset/ignore-tag logic * refactor: extract effectiveSecret helper for chunk-offset callers