Fix secrets false-positive filter ignoring includeFalsePositives flag

The local post-fetch filter for secrets was unconditionally stripping
issues with confidence_score='false_positive', overriding the server-side
include_false_positives param and making the CLI flag have no effect.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: pranavcodeant

src/scans/fetchAdvancedScanResults.js

@@ -299,8 +299,8 @@ export async function fetchAdvancedScanResults(repo, commitId, resultType, opts
       }
     }
 
-    // Filter secrets false positives
-    if (resultType === ADVANCED_RESULT_TYPES.SECRETS) {
+    // Filter secrets false positives only when caller explicitly excludes them
+    if (resultType === ADVANCED_RESULT_TYPES.SECRETS && !includeFalsePositives) {
       issues = issues.filter((issue) => String(issue.confidence_score || '').toLowerCase() !== 'false_positive');
     }