chore: move the gitleaks allowlist to the repository root
Merged
JI
2d ago+2+2+0123456789-0-0-0123456789
The managed secret-scan workflow reports 43 secrets-detection violations. All of them are in test files, test data, development keys and the development values of the Helm chart.
The repository already has an allowlist for these paths, in .github/workflows/utils/.gitleaks.toml. No workflow reads this file now. The managed scan runs betterleaks from the repository root, and betterleaks reads .gitleaks.toml only from the root.
This change moves the allowlist to .gitleaks.toml at the root. The allowlist does not change. The PR validation scan also reads the file.
Refs PFM-8051.
AI disclosure: Claude Code helped to write this change.