chore: upgrade trunk (#426)

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

5 linters were upgraded:

- checkov 3.2.401 → 3.2.405
- gitleaks 8.24.2 → 8.24.3
- renovate 39.235.2 → 39.248.2
- ruff 0.11.4 → 0.11.5
- trufflehog 3.88.23 → 3.88.24

1 plugin was upgraded:

- trunk-io/plugins v1.6.7 → v1.6.8

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: scottames <8071752+scottames@users.noreply.github.com>

Author: github-actions[bot]

.trunk/trunk.yaml

@@ -5,7 +5,7 @@ cli:
 plugins:
   sources:
     - id: trunk
-      ref: v1.6.7
+      ref: v1.6.8
       uri: https://github.com/trunk-io/plugins
 actions:
   enabled:
@@ -27,24 +27,24 @@ lint:
   enabled:
     - bandit@1.8.3
     - black@25.1.0
-    - checkov@3.2.401
+    - checkov@3.2.405
     - isort@6.0.1
-    - ruff@0.11.4
+    - ruff@0.11.5
     - trivy@0.61.0
     - gokart@0.5.1
     - osv-scanner@2.0.1
     - svgo@3.3.2
     - terrascan@1.19.1
-    - trufflehog@3.88.23
+    - trufflehog@3.88.24
     - actionlint@1.7.7
     - git-diff-check@SYSTEM
-    - gitleaks@8.24.2
+    - gitleaks@8.24.3
     - gofmt@1.20.4
     - golangci-lint@1.64.8
     - hadolint@2.12.1-beta
     - markdownlint@0.44.0
     - prettier@3.5.3
-    - renovate@39.235.2
+    - renovate@39.248.2
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - stylua@2.0.2