One check instead of separate Semgrep, Gitleaks, and Trivy jobs

AngusSecurity replaces scheduling, deduping, the gate, and the report. Detection still runs on OpenGrep, Gitleaks, and Trivy.