A developer accidentally pushes a credential. Secret scanning detects it. Which immediate response is necessary in addition to repository cleanup?

1. Increase the repository's branch count
2. Revoke or rotate the exposed credential
3. Delete the visible line but keep the credential active
4. Add a warning comment next to the secret