ci(gitleaks): add pre-commit hook, config with sealed-secrets allowlist, and tests

ci(gitleaks): add pre-commit hook, config with sealed-secrets allowlist, and tests #1039