Standardize the pre-commit gates on the canonical hook
Add gitleaks secret-scan step to pre-commit hook
Add a rustfmt pre-commit gate