Bump gitleaks version and update lefthook.yml

After gitleaks!1504 (Deprecate detect and protect. Add git, dir, stdin) & gitleaks!1533 (Fix behaviour with --pre-commit and --staged) we should (eventually) update both our lefthooks with those new commands.

• @katrinleinweber-gtlb: Test with v8.20 18.4