fix(ci): correct .gitleaks.toml syntax and allowlist paths

Fix TOML syntax error (paths must be string array, not table array).
Add allowlist for compiled output (out/), .vscode-test/, and
node_modules/. Use regex alternation for src/out variants.

Signed-off-by: Null;Variant <null@nullvariant.com>

🖥️ IDE: [VS Code](https://code.visualstudio.com/)
🔌 Extension: [Claude Code](https://claude.ai/download)

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Model-Raw: claude-opus-4-6

Author: nullvariant

.gitleaks.toml

@@ -1,10 +1,10 @@
 [extend]
 useDefault = true
 
-[[allowlist.paths]]
-description = "Test fixtures contain intentional dummy secrets for security testing"
-regex = '''src/test/'''
-
-[[allowlist.paths]]
-description = "SSH key format detection uses PEM header strings as constants"
-regex = '''src/sshAgent\.ts'''
+[allowlist]
+paths = [
+  '''(src|out)/test/''',
+  '''(src|out)/ssh/sshAgent\.(ts|js)''',
+  '''\.vscode-test/''',
+  '''node_modules/''',
+]