ci: repin trufflehog off unresolvable moving-main SHA (#8)

trufflesecurity/trufflehog@7ee2e0fd… (a SHA from upstream's moving
`main`, since GC'd) no longer resolves -> the job hard-fails at
"Set up job". Repin to released tag v3.92.3 (canonical pin used by
reposystem/v3-templater quality.yml).

Refs hyperpolymath/standards#82

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/quality.yml

@@ -66,7 +66,7 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Check for secrets
-        uses: trufflesecurity/trufflehog@7ee2e0fdffec27d19ccbb8fb3dcf8a83b9d7f9e8 # main
+        uses: trufflesecurity/trufflehog@05cccb53bc9e13bc6d17997db5a6bcc3df44bf2f # v3.92.3
         with:
           path: ./
           base: ${{ github.event.pull_request.base.sha || github.event.before }}