chore(deps): bump trufflesecurity/trufflehog from 3.90.6 to 3.96.0

Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.90.6 to 3.96.0.
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](trufflesecurity/trufflehog@18c7b1f...6f3c981)

---
updated-dependencies:
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.96.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/security.yml

@@ -109,11 +109,11 @@ jobs:
         working-directory: mesh
         run: npm audit --audit-level=high
       - name: Scan repository history for non-URI secrets
-        uses: trufflesecurity/trufflehog@18c7b1fc33e6c16b27ea66ff27cc7e642fb7cd0a # v3.90.6
+        uses: trufflesecurity/trufflehog@6f3c981e7b77f235fd2702dd74af25fc4b72bf11 # v3.96.0
         with:
           extra_args: --results=verified,unknown --exclude-detectors=URI
       - name: Scan repository history for credential-bearing URIs
-        uses: trufflesecurity/trufflehog@18c7b1fc33e6c16b27ea66ff27cc7e642fb7cd0a # v3.90.6
+        uses: trufflesecurity/trufflehog@6f3c981e7b77f235fd2702dd74af25fc4b72bf11 # v3.96.0
         with:
           extra_args: --results=verified,unknown --include-detectors=URI --exclude-paths=.trufflehog-uri-excludes