feat: add required workflow for detecting leaked secrets

[lukasmrtvy]

We should probably move reusable workflows to a separate directory as well, and use .github/workflows/ solely for workflows for validating, etc.