It seems like the existing exclusions don't work in all cases. This should make them work regardless of where git-secrets is called from.
Resolves https://github.com/brave/brave-browser/issues/9090