fix: suppress Snyk hardcoded-secret false positive in bundler test fixtures

Test fixtures use placeholder API keys/tokens, not real secrets. Add
inline deepcode ignore annotations so Snyk Code suppresses the finding
at the source instead of relying on org-level web UI ignores.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Author: reeshika-h

test/bundlers/esbuild-app/src/index.js

@@ -53,6 +53,7 @@ const regions = [
 regions.forEach(({ name, check }) => {
   test(`SDK works with ${name} region`, () => {
     const stack = contentstack.stack({
+      // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
       apiKey: 'test_key',
       deliveryToken: 'test_token',
       environment: 'test',

test/bundlers/rollup-app/src/index.js

@@ -53,6 +53,7 @@ const regions = [
 regions.forEach(({ name, check }) => {
   test(`SDK works with ${name} region`, () => {
     const stack = contentstack.stack({
+      // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
       apiKey: 'test_key',
       deliveryToken: 'test_token',
       environment: 'test',