Update Dependabot config with cooldown

[wesley-dean]

Proposed Changes

1. Add cooldown to Dependabot configuration per Semgrep recommendation
2. Refactor pre-commit config to use non-containerized GitLeaks

Readiness Checklist

• If documentation is needed for this change, has that been included in this pull request

Reviewing Maintainer

• Label as breaking if this is a large fundamental change
• Label as either automation, bug, documentation, enhancement, infrastructure, or performance

[wesley-dean]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ REPOSITORY	checkov	yes		no	no	23.79s
✅ REPOSITORY	gitleaks	yes		no	no	0.28s
✅ REPOSITORY	grype	yes		no	no	54.27s
✅ REPOSITORY	kingfisher	yes		no	no	8.15s
✅ REPOSITORY	secretlint	yes		no	no	1.42s
✅ REPOSITORY	semgrep	yes		no	no	25.74s
✅ REPOSITORY	syft	yes		no	no	2.45s
✅ REPOSITORY	trivy	yes		no	no	11.51s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.16s
✅ REPOSITORY	trufflehog	yes		no	no	4.49s

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

Show us your support by starring ⭐ the repository