chore: upgrade trunk

[github-actions]

9 linters were upgraded:

• actionlint 1.7.7 → 1.7.8
• checkov 3.2.469 → 3.2.492
• gitleaks 8.28.0 → 8.29.0
• osv-scanner 2.2.2 → 2.2.4
• renovate 41.93.2 → 42.5.4
• ruff 0.12.11 → 0.14.4
• trivy 0.65.0 → 0.67.2
• trufflehog 3.90.5 → 3.90.13
• trufflehog-git 3.90.5 → 3.90.13

1 plugin was upgraded:

• trunk-io/plugins v1.7.2 → v1.7.3

This PR was generated by the Trunk Action. For more info, see our docs or reach out on Slack.