chore(deps): bump trufflesecurity/trufflehog from 3.90.6 to 3.97.0

Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.90.6 to 3.97.0.
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](trufflesecurity/trufflehog@18c7b1f...bcfcf73)

---
updated-dependencies:
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.97.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/security.yml

@@ -113,11 +113,11 @@ jobs:
           npm audit --prefix feature-deps/matrix-voice --audit-level=high
           npm audit --prefix feature-deps/legacy-lan --audit-level=high
       - name: Scan repository history for non-URI secrets
-        uses: trufflesecurity/trufflehog@18c7b1fc33e6c16b27ea66ff27cc7e642fb7cd0a # v3.90.6
+        uses: trufflesecurity/trufflehog@bcfcf73aaf4759d4dadc2783177c245a02792318 # v3.97.0
         with:
           extra_args: --results=verified,unknown --exclude-detectors=URI
       - name: Scan repository history for credential-bearing URIs
-        uses: trufflesecurity/trufflehog@18c7b1fc33e6c16b27ea66ff27cc7e642fb7cd0a # v3.90.6
+        uses: trufflesecurity/trufflehog@bcfcf73aaf4759d4dadc2783177c245a02792318 # v3.97.0
         with:
           extra_args: --results=verified,unknown --include-detectors=URI --exclude-paths=.trufflehog-uri-excludes