feat: comprehensive asset scan status integration tests (non-AM + AM org)

Add assetScanStatus-test.js (Phase 6.5) covering 12 test cases on the
non-AM org stack and 7 test cases on the AM/DAM org stack:

Non-AM Org (ORGANIZATION, scan enabled):
1. Freshly uploaded asset returns _asset_scan_status (pending/clean)
2. Status value is a valid enum (pending|clean|quarantined|not_scanned)
3. Status ABSENT from single fetch when param is omitted
4. ALL file items in list carry status when param is passed
5. NO list items carry status when param is omitted
6. Status consistent between single-fetch and list-query for same asset
7. Status present when combined with version=1 param
8. Status present when combined with locale=en-us param
9. Status resets to pending after asset file is replaced
10. Folder entries do NOT get _asset_scan_status
11. Status present across multiple pages of paginated list
12. Status absent when include_asset_scan_status=false

AM Org (AM_API_KEY required, DAM + scan enabled):
AM-1..7: same coverage for DAM asset upload pipeline

Also:
- Registers the suite in sanity.js as Phase 6.5 (after asset-test.js)
- Adds AM_API_KEY placeholder to .env with setup instructions
- Updates .talismanrc for false-positive secret scan patterns

Author: aniket-shikhare-cstk

.talismanrc

@@ -1,4 +1,8 @@
 fileignoreconfig:
 - filename: package-lock.json
   checksum: 80c8eb5270a1c4a0fa244d0f001d15867449d44954eb4d3f1ab7fa68c6f5446d
-version: ""
+- filename: test/sanity-check/sanity.js
+  checksum: f8b4b4b4492e04fd13338af9d99972807b4d61e2b0237a6c057d3f93d8c66d60
+- filename: test/sanity-check/api/assetScanStatus-test.js
+  checksum: 0b6afba5e427cd36aff0f09cd5540058b684cc728bc7ed9e08f6027dd80335bf
+version: "1.0"