Upgrade trunk

[github-actions]

9 linters were upgraded:

• actionlint 1.6.9 → 1.7.12
• checkov 3.2.507 → 3.2.513
• dotenv-linter 3.3.0 → 4.0.0
• ktlint 0.43.2 → 1.8.0
• osv-scanner 1.3.6 → 2.3.5
• oxipng 7.0.0 → 10.1.0
• shellcheck 0.8.0 → 0.11.0
• trivy 0.69.2 → 0.69.3
• trufflehog 3.31.3 → 3.94.1

2 runtimes were upgraded:

• go 1.19.5 → 1.21.0
• node 18.12.1 → 22.16.0

This PR was generated by the Trunk Action. For more info, see our docs or reach out on Slack.

[cursor]

PR Summary

Low Risk
Low risk config-only change, but upgrading Go/Node runtimes and multiple security/formatting linters may cause new CI lint findings or require local dev toolchain updates.

Overview
Upgrades Trunk configuration by bumping the Go runtime to 1.21.0 and Node runtime to 22.16.0, and updating several enabled linters (e.g. actionlint, checkov, ktlint, osv-scanner, shellcheck, trivy, trufflehog).

Adds an explicit Trunk plugins source pointing at trunk-io/plugins v1.7.6.

^{Written by Cursor Bugbot for commit 7726437. This will update automatically on new commits. Configure here.}