feat(ci-infra): strip every file-type blanket from the gitleaks allowlist (#1280)