[trufflehog] Don't try to update the binary on run

This occasionally prevents commits due to a permissions error. Kind of
crazy default behavior imo.

shallow_backup/git_wrapper.py

@@ -149,7 +149,7 @@ def install_trufflehog_git_hook(repo: git.Repo):
       - id: trufflehog
         name: TruffleHog
         description: Detect secrets in your data.
-        entry: bash -c 'trufflehog git file://. --since-commit HEAD --fail'
+        entry: bash -c 'trufflehog git file://. --since-commit HEAD --fail --only-verified --no-update'
         language: system
         stages: ["commit", "push"]
 """