fix(ci): run gitleaks container via podman on host

Execute Gitleaks inside Podman from the host runner to bypass Node.js PATH requirements in minimal containers.

.gitea/workflows/test-ci.yml

@@ -15,15 +15,14 @@ jobs:
 
   gitleaks-scan:
     name: Secret Detection (Gitleaks)
-    runs-on: ubuntu-latest
+    runs-on: host
-    container:
-      image: zricethezav/gitleaks:latest
     steps:
-      - name: Check Out Code
+      - name: Fetch Code
-        uses: actions/checkout@v3
-        with:
-          fetch-depth: 0
-
-      - name: Run Gitleaks Scan
         run: |
-          gitleaks detect --source . -v
+          git config --global --add safe.directory "$PWD"
+          git fetch --all
+
+      - name: Run Gitleaks via Container Engine
+        run: |
+          echo "🔍 Lancement du scan Gitleaks..."
+          podman run --rm -v "$PWD":/path zricethezav/gitleaks:v8.18.2 detect --source="/path" -v