feat: add secrets scanning

[wayne-grant]

• Added pre-commit check for gitleaks
• Added secrets scanning to pipeline
• No secrets found
• +1s to build time

[CLAassistant]

All committers have signed the CLA.

[snyksec]

:tada: This PR is included in version 3.27.0 :tada:

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot :package::rocket: