chore(ci): smoke-test gitleaks workflow post-OPS-732 (do not merge)

[yotamleo]

Purpose

This PR is not meant to be merged. It exists only to validate the gitleaks workflow change in #32 (OPS-732) once that PR lands on `master`.

How to verify

1. Merge fix(ci): [OPS-732] replace gitleaks-action with CLI for fork PR support #32 to `master`.
2. Push any no-op commit to this branch (e.g. `git commit --allow-empty -m "ci: re-trigger" && git push`) or close + reopen this PR. Either re-fires the `pull_request_target` event, which now picks up the new YAML from `master`.
3. Confirm the `gitleaks` check goes green and the run log shows:
   • `Install gitleaks` step succeeded (CLI version printed).
   • `Run gitleaks` step ran `gitleaks detect --source . --log-opts ..HEAD --exit-code 1` and exited 0.
   • No `The [pull_request_target] event is not yet supported` error.
4. Close this PR without merging.

Limitations

• This validates Path 2 (same-repo `pull_request_target`). Path 3 (fork PR) requires an actual fork; the workflow paths are identical except for ref-resolution, so a green Path 2 is strong evidence Path 3 will work.

Diff

Whitespace-only README tweak. No functional change.

🤖 Generated with Claude Code