Add secret scanning to pre-commit hooks

[matthew-li]

Add a secret scanning tool (e.g. gitleaks) as a pre-commit hook to prevent
credentials and other secrets from being committed to the repository.