Add a .gitleaks.toml file that lists all the test passwords and paths to
keys that should be ignored by the security scanner. This avoids false
positives so we can enable the scanner to catch actual leaks.
Closes#1747
Signed-off-by: Achilleas Koutsou <achilleas@koutsou.net>
