Security suite failed (main @ d53a882)

The root `mise run security` suite failed in GitHub Actions. Use the log tail below and reproduce locally with the same command.

| Field | Value |
| --- | --- |
| Workflow run | [Security #18](https://github.com/aws-samples/sample-autonomous-cloud-coding-agents/actions/runs/30816138317) |
| Ref | `refs/heads/main` |
| SHA | [`d53a8820042be8f3948e1e9e7dd3d2a60e627a11`](https://github.com/aws-samples/sample-autonomous-cloud-coding-agents/commit/d53a8820042be8f3948e1e9e7dd3d2a60e627a11) |
| Actor | @krokoko |
| Event | `schedule` |

### Log tail (last 200 lines)

```text
mise WARN deprecated [config.experimental_monorepo_root]: `experimental_monorepo_root` in ~/work/sample-autonomous-cloud-coding-agents/sample-autonomous-cloud-coding-agents/mise.toml is deprecated. Use `monorepo_root` instead. This will be removed in mise 2027.12.0.
[//:security:secrets] $ gitleaks git . --no-banner --redact
1:04PM INF 1532 commits scanned.
1:04PM INF scanned ~52464857 bytes (52.46 MB) in 5.51s
1:04PM WRN leaks found: 3
[//:security:secrets] ERROR task failed
```

Close this issue after `mise run security` succeeds on `main` (or the branch you merge to).

Start by running `mise run security` locally and inspect the security workflow run linked in the issue. Trace the three gitleaks findings to their affected commits or files, then address or appropriately exclude them according to the repository’s security conventions. Done means `mise run security` succeeds on the target branch.

Written by the indexing model from the issue text.