Expand test coverage

[SimonGurney]

• ~~Do we detect all secrets we programmatically put in a repo~~
• Do we deduplicate secrets as we expect
• Do we identify all repos for each provider
• ~~Do we redact secrets when we say we do~~
• ~~Do we output parsable csv and json~~
• ~~Do we output populated fields where we expect that we do~~
• ~~Do we cleanup~~
• ~~Do we not cleanup when we say we wont~~
• Is the the output file outputted to the right place
• ~~Does single branch scanning scan just one branch~~