fix: final security workflow syntax and artifact issues

- Fix upload-artifact deprecated action in code-security-scan job
- Fix YAML indentation error in TruffleHog secrets scan
- Ensure all upload actions use v4

This should resolve the remaining Security Checks workflow failures.

Author: d-oit

.github/workflows/security.yml

@@ -232,8 +232,8 @@ jobs:
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-     - name: TruffleHog scan
-       uses: trufflesecurity/trufflehog@ad6fc8fb446b8fafbf7ea8193d2d6bfd42f45690
+    - name: TruffleHog scan
+      uses: trufflesecurity/trufflehog@ad6fc8fb446b8fafbf7ea8193d2d6bfd42f45690
       with:
         path: ./
         base: main