Secret-scanning allowlist suppresses detection of a real deploy key leak after the repository path pattern changed

A known false positive rule is kept too broad, and once the repository layout changes it begins to hide a genuine credential leak in the new path.