Resolve gitleaks version dynamically via GitHub redirect. Add .gitleaks.toml to allowlist dummy hCaptcha sitekeys in test_captcha.py (false positives on test UUIDs). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
