chore: sync .gitleaks.toml from security-config

Author: security-config-sync[bot]

.gitleaks.toml

@@ -10,6 +10,16 @@
 [allowlist]
   description = "Exclude test fixtures, mock data, sample configs, and CI resources"
   paths = [
+    # Go test files (commonly contain mock credentials)
+    '''.*_test\.go$''',
+
+    # JS/TS test files (.spec.ts, .test.tsx, etc.)
+    '''.*\.spec\.(ts|tsx|js|jsx)$''',
+    '''.*\.test\.(ts|tsx|js|jsx)$''',
+
+    # JS/TS test directories
+    '''__tests__/''',
+
     # Go testdata directories
     '''testdata/''',