FindDetectorMatches searched a bytes.ToLower copy but cut spans from the
original chunk, so a rune whose lowercase differs in byte length shifted every
later position and could hide a credential. Folding only A-Z keeps the lengths
equal and a pooled buffer drops the copy's allocation. Adds a package README.