feat: add GitHub Actions workflow for security checks

- Introduced a new workflow in `.github/workflows/security.yml` to automate security checks on push and pull request events for the `develop` and `main` branches.
- The workflow includes steps for checking out the repository, setting up Node.js, installing dependencies, running an NPM audit, and scanning the git history for secrets using Trufflehog.

Author: devakone

.github/workflows/security.yml

@@ -0,0 +1,38 @@
+name: Security checks
+
+on:
+  push:
+    branches:
+      - develop
+      - main
+  pull_request:
+    branches:
+      - develop
+      - main
+
+jobs:
+  audit-and-secret-scan:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22.13.0
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: NPM audit (moderate)
+        run: npm audit --audit-level=moderate
+
+      - name: Trufflehog git history scan
+        run: npx trufflehog@latest git --repo-path . --entropy False --json --rules none
+        env:
+          TRUFFLEHOG_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}