chore(deps): update dependency github:mongodb/kingfisher to v2.9.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
github:mongodb/kingfisher	tools	minor	2.8.0 → 2.9.0	v2.9.1

---

Release Notes

mongodb/kingfisher (github:mongodb/kingfisher)

v2.9.0

Compare Source

• Fixed the validation-phase message to appear when credential validation begins.
• Reduced scan CPU use in Base64 and Unicode detection without changing scan results.
• Library behavior change: validation timeout(Duration::ZERO) and max_response_bytes(0) now disable their respective limits instead of returning a build error.
• Added --no-limits for unlimited scan budgets and timeouts. Behavior change: --extraction-depth 0 disables the archive depth limit; use --no-extract-archives to disable extraction. #​524
• GitHub user/org and GitLab user/group scans now overlap discovery, cloning, and scanning; added --user-file for both providers. Behavior change: clone limits select the first unique repositories discovered per provider in API order; explicit Git URLs and added wiki URLs are not counted. #​525
• Added --since-hours N for recent Git history scans. Behavior change: --since-commit now scans all refs by default; use --branch HEAD to retain the previous scope. --branch restricts either scan. #​526

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[pullfrog]

✅ No new issues found.

Reviewed changes — reviewed the single-commit Renovate bump of the kingfisher secret-scanning tool.

• Tool version bump — mise.toml moves github:mongodb/kingfisher from 2.8.0 to 2.9.0, the only change in the diff.
• Repo wiring unaffected — kingfisher is invoked with no custom flags via Builtins.kingfisher in hk.pkl, so the v2.9.0 flag-scope behavior changes do not alter this repo's pre-commit scan; the remaining upstream changes are a message fix and scan CPU reduction with unchanged results.

  ^{｜ View workflow run ｜ Using muse-spark-1.3-contributor-free (free) ｜ 𝕏}

[pullfrog]

✅ Approved — auto-merge enabled; GitHub will merge once required checks pass.

  ^{｜ View workflow run ｜ via Pullfrog ｜ Using muse-spark-1.3-contributor-free (free) ｜ 𝕏}