fix(ci): allowlist test fixtures and doc examples in gitleaks config

[d-oit]

Extends the gitleaks allowlist to cover 8 false positives surfaced after the v2.3.9 pin enabled real scanning:

• test fixture keys (e.g. test-api-key-123456789)
• historical test files (src/lib/llm/tests/) removed from main but scanned via full history
• doc examples in security-patterns.md (sk-abc123xyz, fake RSA key)
• SKILL.md env-var placeholder line

Verified with the manual security-scan run (31526331570).

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
do-knowledge-studio	Ready	Preview, v0	Aug 11, 2026 7:18pm

[deepsource-io]

DeepSource Code Review

We reviewed changes in da28c50...8860686 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
JavaScript		Aug 11, 2026 7:17p.m.	Review ↗
Python		Aug 11, 2026 7:17p.m.	Review ↗
Shell		Aug 11, 2026 7:17p.m.	Review ↗
SQL		Aug 11, 2026 7:17p.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}