Feat: ✨ Add validate-pr-secret workflow with gitleaks-action (#34)

* Initial plan

* ✨ Add validate-pr-secret workflow with gitleaks-action

Co-authored-by: tomgrv <1809566+tomgrv@users.noreply.github.com>

* ✨ Add validate-pr-secret workflow to githooks stubs

Co-authored-by: tomgrv <1809566+tomgrv@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: tomgrv <1809566+tomgrv@users.noreply.github.com>

Author: Copilot

.github/workflows/validate-pr-secret.yml

@@ -0,0 +1,24 @@
+# @format
+
+name: Validate PR Secrets
+
+on:
+  pull_request:
+    types: [opened, edited, reopened, synchronize]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  gitleaks:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Run Gitleaks
+        uses: gitleaks/gitleaks-action@v2
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

src/githooks/stubs/.github/workflows/validate-pr-secret.yml

@@ -0,0 +1,24 @@
+# @format
+
+name: Validate PR Secrets
+
+on:
+  pull_request:
+    types: [opened, edited, reopened, synchronize]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  gitleaks:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Run Gitleaks
+        uses: gitleaks/gitleaks-action@v2
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}