gitleaks: handle whitespace around token= and case-insensitive domain

Addresses Copilot review on #527:
- rule 1: allow optional whitespace around 'token =' so 'apikey token = <uuid>'
  is caught (the no-space 'apikey token=<uuid>' form already matched).
- rule 2: add '(?i)' so case variants of the bioontology.org domain are caught.

Validated with gitleaks 8.30.1: all documented BioPortal key forms flagged,
contextless bare UUID not flagged.

Co-Authored-By: Claude <noreply@anthropic.com>

Author: turbomam

.gitleaks.toml

@@ -14,11 +14,11 @@ useDefault = true
 [[rules]]
 id = "bioportal-ncbo-api-key"
 description = "BioPortal / NCBO BioOntology API key (UUID in an apikey context)"
-regex = '''(?i)(?:bioportal[_-]?(?:api[_-]?key|token)|api[_-]?key|apikey)["'\s:=>]{0,4}(?:token=)?[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}'''
+regex = '''(?i)(?:bioportal[_-]?(?:api[_-]?key|token)|api[_-]?key|apikey)["'\s:=>]{0,4}(?:token\s*=\s*)?[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}'''
 keywords = ["apikey", "api_key", "bioportal", "bioontology"]
 
 [[rules]]
 id = "bioportal-ncbo-apikey-url"
 description = "BioPortal / NCBO API key embedded in a bioontology.org URL"
-regex = '''bioontology\.org[^\s"'<>]*apikey=[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}'''
+regex = '''(?i)bioontology\.org[^\s"'<>]*apikey=[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}'''
 keywords = ["bioontology"]