ci(secret-scanner): drop duplicate --fail from trufflehog extra_args (#19)

Propagates the rsr-template-repo#37 fix: trufflehog v3 auto-injects
`--fail` on `pull_request` events, so passing it again as `extra_args`
produced `flag 'fail' cannot be repeated` and broke every secret-scanner
run. Dropping the duplicate restores green secret-scanner CI on this
repo.

Author: hyperpolymath

.github/workflows/secret-scanner.yml

@@ -21,7 +21,9 @@ jobs:
       - name: TruffleHog Secret Scan
         uses: trufflesecurity/trufflehog@8a8ef8526528d8a4ff3e2c90be08e25ef8efbd9b # v3
         with:
-          extra_args: --only-verified --fail
+          # The v3 action injects --fail automatically on pull_request events.
+          # Passing --fail here triggers "flag 'fail' cannot be repeated".
+          extra_args: --only-verified
 
   gitleaks:
     runs-on: ubuntu-latest
@@ -65,4 +67,4 @@ jobs:
           if [ $found -eq 1 ]; then
             echo "::error::Potential hardcoded secrets detected. Use environment variables instead."
             exit 1
-          fi
+          fi