chore: Clean up Gitleaks configuration by removing unused allowlist section and streamline CI workflow permissions for package access.

Author: Arnel Jan Sarmiento

.github/workflows/ci.yml

@@ -55,6 +55,7 @@ jobs:
       contents: read
       id-token: write
       pull-requests: read
+      packages: read
     steps:
       - uses: actions/checkout@v4
       - uses: gitleaks/gitleaks-action@v2

.gitleaks.toml

@@ -3,9 +3,3 @@ title = "Durianpy gitleaks configuration"
 # Keep this minimal: use Gitleaks' built-in rules and add only repo-specific allowlists.
 [extend]
 useDefault = true
-
-[allowlist]
-description = "Allowlists for known non-secret patterns and generated artifacts in Durianpy infrastructure"
-
-# Avoid scanning common vendor/lock artifacts and build caches in commits.
-paths = []