fix(ci): drop the retired inline trufflehog job (#168)

The permission fix has landed, so `Secret Scanner` now **starts** —
`gitleaks`, `rust-secrets` and `shell-secrets` all pass. But the
workflow still reports **red**, because of a vestigial inline
`trufflehog` job.

`secret-scanner-reusable.yml` **deliberately retired** TruffleHog as
redundant — from its own header:

> Trufflehog removed: gitleaks provides sufficient coverage at lower
cost.

The inline job was left behind when the repo moved to the reusable. It
fails and reds the whole workflow, so the repo keeps emitting
`ci_activity` notifications even though secret scanning is green.

This removes the retired job. Coverage is unchanged — gitleaks in the
reusable already covers it.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/secret-scanner.yml

@@ -18,17 +18,3 @@ jobs:
       contents: read
     uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@c65436ee3351cd6b0fa14b142938b195efc77586
     secrets: inherit
-  trufflehog:
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v4
-        with:
-          fetch-depth: 0
-      - name: TruffleHog Secret Scan
-        uses: trufflesecurity/trufflehog@27b0417c16317ca9a472a9a8092acce143b49c55 # v3.93.3
-        with:
-          # The action already appends `--fail` internally; repeating it here
-          # makes the trufflehog binary abort with "flag 'fail' cannot be
-          # repeated". Pass only `--only-verified`.
-          extra_args: --only-verified