chore: sync security config files

[security-config-sync]

Summary

This PR syncs security scanning configuration files from the central security-config repository, managed by the @opendatahub-io/odh-platform-security team.

Files

File	Status
semgrep.yaml	Updated
.gitleaks.toml	Updated

What does this mean for your team?

• No action required from reviewers beyond merging this PR
• These files are protected by an org-level push ruleset — they cannot be modified directly in this repo
• Future updates will be synced automatically via PRs from the security-config repo
• CodeRabbit and Semgrep will use these configs when reviewing PRs on this repo

For questions or customization requests, open an issue on opendatahub-io/security-config.

[github-actions]

The following are automatically added/executed:

• PR size label.
• Run pre-commit
• Run tox
• Add PR author as the PR assignee
• Build image based on the PR

Available user actions:

• To mark a PR as WIP, add /wip in a comment. To remove it from the PR comment /wip cancel to the PR.
• To block merging of a PR, add /hold in a comment. To un-block merging of PR comment /hold cancel.
• To mark a PR as approved, add /lgtm in a comment. To remove, add /lgtm cancel.
  lgtm label removed on each new commit push.
• To mark PR as verified comment /verified to the PR, to un-verify comment /verified cancel to the PR.
  verified label removed on each new commit push.
• To Cherry-pick a merged PR /cherry-pick <target_branch_name> to the PR. If <target_branch_name> is valid,
  and the current PR is merged, a cherry-picked PR would be created and linked to the current PR.
• To build and push image to quay, add /build-push-pr-image in a comment. This would create an image with tag
  pr-<pr_number> to quay repository. This image tag, however would be deleted on PR merge or close action.

Supported labels

{'/hold', '/cherry-pick', '/wip', '/lgtm', '/verified', '/build-push-pr-image'}

[dbasunag]

/lgtm

[github-actions]

Status of building tag latest: success.
Status of pushing tag latest to image registry: success.