Upgrade trunk, fix trufflehog and buildifier

[TylerJang27]

• Upgrade trunk and bump the minimum required version
  • This will unblock Add Poetry actions #229
  • This will fix some of the Windows nightly issues (I'll queue a job after this lands)
  • This will fix the check nightly runs (I'll queue a job after this lands)
  • This will add PHP runtime support (soon)
  • Note there is one rare daemon lifetime bug that will need a fast follow-up upgrade fix
• buildifier released 7.1.0, which mandates load sorting as a formatting fix
• trufflehog released 3.71.1, which no longer lints symlinks, so we have to use copy_targets and cache results to generate a sandbox (cache_ttl does not imply cache_results currently)

Note that we will need to have a prod CLI release before we can next release plugins (minor version bump)

[trunk-io]

⏱️ 26m total CI duration on this PR

Job	Cumulative Duration	Recent Runs
Linter Tests macOS	7m	🟩
Tool Tests (macOS)	5m	🟥 🟥
Windows Linter Tests	5m	🟩
Linter Tests Linux	4m	🟩
CodeQL-Build	1m	🟩
Trunk Check runner [linux]	1m	🟩
Tool Tests (Linux)	1m	🟩
Action Tests	53s	🟩
Repo Tests / Plugin Tests	27s	🟩
Detect changed files	11s	🟩
Aggregate Test Results	5s	🟥 🟥

_{settings ⋅ feedback ⋅ docs ⋅ learn more about trunk.io}