fix: use gitleaks v1 to avoid license requirement

Author: AI Assistant

.github/workflows/secret-scan.yml

@@ -7,18 +7,15 @@ on:
     branches: [ "main", "master" ]
 
 jobs:
-  trufflehog:
-    name: Trufflehog Secret Scan
+  gitleaks:
+    name: Gitleaks Secret Scan
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - name: Run trufflehog
-        uses: trufflesecurity/trufflehog@v3
-        with:
-          path: ./
-          base: ${{ github.event.repository.default_branch }}
-          head: HEAD
-          extra_args: --debug --only-verified
+      - name: Run gitleaks
+        uses: gitleaks/gitleaks-action@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}