feat: add trufflehog to precommit (#4252)

* add trufflehog

* add to readme

* use their docs

.pre-commit-config.yaml

@@ -11,6 +11,11 @@ repos:
 
   - repo: local
     hooks:
+      - id: trufflehog
+        name: TruffleHog
+        entry: bash -c 'trufflehog git file://. --since-commit HEAD --results=verified,unknown --fail'
+        language: system
+        stages: ["pre-commit", "pre-push"]
       - id: autoflake
         name: autoflake
         entry: bash -c '[ -d "apps/core" ] && cd apps/core; uv run autoflake --remove-all-unused-imports --remove-unused-variables --in-place --recursive --ignore-init-module-imports .'