fix(leak-scan): install gitleaks+trufflehog with SHA pins; fail-closed all-refs mode#63

jorisjonkers-dev-agents[bot] merged 2 commits into

mainJorisJonkers-dev/github-workflows:mainfrom

fix/leak-scan-install-toolsJorisJonkers-dev/github-workflows:fix/leak-scan-install-toolsCopy head branch name to clipboard