fix(ci): exclude test fixtures from trufflehog via .trufflehogignore

REPOSITORY_TRUFFLEHOG_ARGS is not honored by the MegaLinter trufflehog
descriptor; the supported mechanism is a workspace .trufflehogignore
file, which MegaLinter merges into the generated --exclude-paths file.
Excludes packages/create-awesome-python-app/tests/ only — production
code remains fully scanned.

Author: ulises-jeremias

.mega-linter.yml

@@ -35,6 +35,3 @@ DISABLE_LINTERS:
 
 SHOW_ELAPSED_TIME: true
 FILTER_REGEX_EXCLUDE: (uv\.lock|megalinter-reports/)
-# trufflehog >=3.96 Lob detector false-positives on `test_*` function names
-# (Lob test keys share the `test_` prefix). Keep every other detector active.
-REPOSITORY_TRUFFLEHOG_ARGS: "--exclude-detectors=Lob"

.trufflehogignore

@@ -0,0 +1,4 @@
+# Lob detector false-positives: any `test_*` function name looks like a Lob
+# test key (shared `test_` prefix). Exclude test fixtures from the scan;
+# production code stays fully covered.
+packages/create-awesome-python-app/tests/.*