CI: restore main detect-secrets scan (#38438)

* Tests: stabilize detect-secrets fixtures

* Tests: fix rebased detect-secrets false positives

* Docs: keep snippets valid under detect-secrets

* Tests: finalize detect-secrets false-positive fixes

* Tests: reduce detect-secrets false positives

* Tests: keep detect-secrets pragmas inline

* Tests: remediate next detect-secrets batch

* Tests: tighten detect-secrets allowlists

* Tests: stabilize detect-secrets formatter drift

extensions/slack/src/channel.test.ts

@@ -144,7 +144,7 @@ describe("slackPlugin config", () => {
         slack: {
           mode: "http",
           botToken: "xoxb-http",
-          signingSecret: "secret-http",
+          signingSecret: "secret-http", // pragma: allowlist secret
         },
       },
     };
@@ -214,9 +214,9 @@ describe("slackPlugin config", () => {
         configured: true,
         mode: "http",
         botTokenStatus: "available",
-        signingSecretStatus: "configured_unavailable",
+        signingSecretStatus: "configured_unavailable", // pragma: allowlist secret
         botTokenSource: "config",
-        signingSecretSource: "config",
+        signingSecretSource: "config", // pragma: allowlist secret
         config: {
           mode: "http",
           botToken: "xoxb-http",