ci(trufflehog): pin reusable to isaiah/trufflehog-single-invocation for ruleset testing

Revert org-required to @main before merging this branch to main.

Made-with: Cursor

Author: isaiah-grafana

.github/workflows/org-required-trufflehog.yml

@@ -21,7 +21,7 @@ permissions:
 jobs:
   secret-scan:
     name: TruffleHog Secret Scan
-    uses: grafana/security-github-actions/.github/workflows/reusable-trufflehog.yml@main
+    uses: grafana/security-github-actions/.github/workflows/reusable-trufflehog.yml@isaiah/trufflehog-single-invocation
     with:
       # Non-blocking: job succeeds; PR still gets comments/artifacts when findings exist
       fail-on-verified: "false"      # Set "true" to fail on verified secrets