feat(ci): add trufflehog secrets detection

### What does this PR do?

Adding a GH action to scan for leaked secrets on each commit.