chore: upgrade trunk (#420)

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

5 linters were upgraded:

- checkov 3.2.396 → 3.2.401
- osv-scanner 2.0.0 → 2.0.1
- renovate 39.229.0 → 39.235.2
- ruff 0.11.2 → 0.11.4
- trufflehog 3.88.20 → 3.88.23

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: scottames <8071752+scottames@users.noreply.github.com>

Author: github-actions[bot]

.trunk/trunk.yaml

@@ -27,15 +27,15 @@ lint:
   enabled:
     - bandit@1.8.3
     - black@25.1.0
-    - checkov@3.2.396
+    - checkov@3.2.401
     - isort@6.0.1
-    - ruff@0.11.2
+    - ruff@0.11.4
     - trivy@0.61.0
     - gokart@0.5.1
-    - osv-scanner@2.0.0
+    - osv-scanner@2.0.1
     - svgo@3.3.2
     - terrascan@1.19.1
-    - trufflehog@3.88.20
+    - trufflehog@3.88.23
     - actionlint@1.7.7
     - git-diff-check@SYSTEM
     - gitleaks@8.24.2
@@ -44,7 +44,7 @@ lint:
     - hadolint@2.12.1-beta
     - markdownlint@0.44.0
     - prettier@3.5.3
-    - renovate@39.229.0
+    - renovate@39.235.2
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - stylua@2.0.2