feat(ci): ignore unverified trufflehog results

see https://github.com/huggingface/huggingface.js/pull/1172

.github/workflows/trufflehog.yml

@@ -13,3 +13,5 @@ jobs:
           fetch-depth: 0
       - name: Secret Scanning
         uses: trufflesecurity/trufflehog@main
+        with:
+          extra_args: --results=verified,unknown