improvements: address feedback and setup queue worker profiles

docs/api-reference/endpoints/secret-scanning/config/get-by-project-id.mdx

@@ -1,4 +1,4 @@
 ---
 title: "Get by Project ID"
-openapi: "GET /api/v2/secret-scanning/configs/{projectId}"
+openapi: "GET /api/v2/secret-scanning/configs"
 ---

docs/api-reference/endpoints/secret-scanning/config/update.mdx

@@ -1,6 +1,6 @@
 ---
 title: "Update"
-openapi: "PATCH /api/v2/secret-scanning/configs/{projectId}"
+openapi: "PATCH /api/v2/secret-scanning/configs"
 ---
 
 <Note>

docs/documentation/platform/secret-scanning/overview.mdx

@@ -10,6 +10,12 @@ Monitor and detect exposed secrets across your data sources, including code repo
 
 For additional security, we recommend using our [CLI Secret Scanner](/cli/scanning-overview#automatically-scan-changes-before-you-commit) to check for exposed secrets before pushing your code changes.
 
+<Note>
+    Secret Scanning is a paid feature.
+    If you're using Infisical Cloud, then it is available under the **Enterprise Tier**. If you're self-hosting Infisical,
+    then you should contact team@infisical.com to purchase an enterprise license to use it.
+</Note>
+
 ## How Secret Scanning Works
 
 Secret Scanning consists of several components that enable you to quickly respond to secret leaks:

docs/integrations/app-connections/github-radar.mdx

@@ -5,6 +5,12 @@ description: "Learn how to configure a GitHub Radar Connection for Infisical."
 
 Infisical supports GitHub App installation for creating a GitHub Radar Connection.
 
+<Note>
+    GitHub Radar Connections are specifically configured for [Secret Scanning](/documentation/platform/secret-scanning/overview) and require specific permissions and webhook configuration.
+
+    Check out our [GitHub Connection](/integrations/app-connections/github) for secret management features such as [Secret Syncs](/integrations/secret-syncs/overview).
+</Note>
+
 <Accordion title="Self-Hosted Instance">
     Using a GitHub Radar Connection with app authentication on a self-hosted instance of Infisical requires configuring an application on GitHub
     and registering your instance with it.
@@ -38,19 +44,14 @@ Infisical supports GitHub App installation for creating a GitHub Radar Connectio
             ![github radar app webhook](/images/app-connections/github-radar/self-hosted-github-radar-step-3.png)
 
             Set the following repository permissions:
-            1. **Checks**: `Read and Write`
-            2. **Content**: `Read-only`
-            3. **Issues**: `Read and Write`
-            4. **Metadata**: `Read-only`
-            5. **Pull Requests**: `Read and Write`
+            - **Contents**: `Read-only`
+            - **Metadata**: `Read-only`
 
             ![github radar app permissions 1](/images/app-connections/github-radar/self-hosted-github-radar-step-4.png)
             ![github radar app permissions 2](/images/app-connections/github-radar/self-hosted-github-radar-step-5.png)
 
             Subscribe to the following events:
-            1. **Check run**
-            2. **Pull request**
-            3. **Push**
+            - **Push**
 
             ![github radar app events](/images/app-connections/github-radar/self-hosted-github-radar-step-6.png)
 
@@ -92,7 +93,7 @@ Infisical supports GitHub App installation for creating a GitHub Radar Connectio
     </Steps>
 </Accordion>
 
-## Setup GitHub Connection in Infisical
+## Setup GitHub Radar Connection in Infisical
 
 <Steps>
     <Step title="Navigate to App Connections">
@@ -100,7 +101,7 @@ Infisical supports GitHub App installation for creating a GitHub Radar Connectio
         ![App Connections Tab](/images/app-connections/general/add-connection.png)
     </Step>
     <Step title="Add Connection">
-        Select the **GitHub Connection** option from the connection options modal.
+        Select the **GitHub Radar Connection** option from the connection options modal.
         ![Select GitHub Radar Connection](/images/app-connections/github-radar/select-github-radar-connection.png)
     </Step>
     <Step title="Authorize Connection">

docs/internals/permissions/project-permissions.mdx

@@ -314,3 +314,32 @@ Supports conditions and permission inversion
 | `create` | Create new SSH certificate templates |
 | `edit`   | Modify SSH template configurations   |
 | `delete` | Remove SSH certificate templates     |
+
+### Secret Scanning
+
+#### Subject: `secret-scanning-data-sources`
+
+| Action   | Description                                          |
+| -------- | ---------------------------------------------------- |
+| `read-data-sources`          | View Data Sources                |
+| `create-data-sources`        | Create new Data Sources          |
+| `edit-data-sources`          | Modify Data Sources              |
+| `delete-data-sources`        | Remove Data Sources              |
+| `read-data-source-resources` | View Data Source Resources       |
+| `read-data-source-scans`     | View Data Source Scans           |
+| `trigger-data-source-scans`  | Trigger Data Source Secret Scans |
+
+#### Subject: `secret-scanning-findings`
+
+| Action   | Description                       |
+| -------- | --------------------------------- |
+| `read-findings`     | View Secret Scanning Findings   |
+| `update-findings`   | Update Secret Scanning Findings |
+
+
+#### Subject: `secret-scanning-configs`
+
+| Action           | Description                                      |
+| ---------------- | ------------------------------------------------ |
+| `read-configs`   | View Secret Scanning Project Configuration       |
+| `update-configs` | Update Secret Scanning Project Configuration     |