HAWNG-395: Handle warnings and false-positives

[phantomjinx]

• .gitleaks.toml

  • Provides an extension config which lists the false-positives that should be ignored

• generate-.*.sh

  • Fixes shellcheck warnings is assignments

• nginx.sh

  • Removes pipefail setting as non-POSIX and since pipes not actually used in script then removed entirely
  • Replaces bash (-v) which POSIX compatible equivalent

• ws-handler.ts

  • Checks the origin of the MessageEvent. Since the messages are expected from the cluster they should only comes from ${APP_HOST}/master so any other origin is not appropriate so should be ignored

• .snyk

  • Exclude non-production files from snyk analysis