Ensure exit with failire code in hog

pkgs/git-hooks-pre-push/pre-push.bash

@@ -2,7 +2,7 @@
 while read -r local_ref _local_oid remote_ref _remote_oid; do
 	# - trufflehog pre-commit hook having crucial limitations. https://github.com/trufflesecurity/trufflehog/blob/v3.88.0/README.md?plain=1#L628-L629
 	# - Adding `--since-commit main` made 10x slower... :<
-	trufflehog git "file://${PWD}" --results='verified,unknown' --branch "$local_ref"
+	trufflehog git "file://${PWD}" --results='verified,unknown' --branch "$local_ref" --fail
 
 	# Git ref is not a file path, but avoiding a typos bug for slash
 	# https://github.com/crate-ci/typos/issues/758