dev: github megalinter workflow configs

- gitleaks
- lychee

.github/config/gitleaks.toml

@@ -0,0 +1,23 @@
+title = "gitleaks config"
+
+[allowlist]
+description = "global allow lists"
+paths = [
+    '''gitleaks.toml''',
+    '''(.*?)(jpg|gif|doc|docx|zip|xls|pdf|bin|svg|socket)$''',
+    '''(go.mod|go.sum)$''',
+    '''gradle.lockfile''',
+    '''node_modules''',
+    '''package-lock.json''',
+    '''pnpm-lock.yaml''',
+    '''Database.refactorlog''',
+    '''vendor''',
+]
+
+[[rules]]
+description = "AWS Example API Key"
+id = "aws-example-api-key"
+regex = '''AKIAIOSFODNN7EXAMPLE'''
+keywords = [
+    "awstoken",
+]

.github/config/lychee.toml

@@ -0,0 +1,24 @@
+
+# ---------------------------------------- 
+# Base URL or website root directory to check relative URLs.
+base = "https://practical.li/"
+
+# Only test links with the given schemes (e.g. https).
+# Omit to check links with any other scheme.
+# At the moment, we support http, https, file, and mailto.
+scheme = ["https"]
+
+# ---------------------------------------- 
+# Exclusions
+
+# Exclude URLs and mail addresses from checking (supports regex).
+# exclude = ['^https://www\.linkedin\.com', '^https://web\.archive\.org/web/']
+
+# Exclude all private IPs from checking.
+# Equivalent to setting `exclude_private`, `exclude_link_local`, and
+# `exclude_loopback` to true.
+exclude_all_private = false
+
+# Check mail addresses
+include_mail = false
+# ----------------------------------------