pre-commit: add `zizmor` a static analysis tool for GitHub Actions

"zizmor is a static analysis tool for GitHub Actions.

It can find many common security issues in typical GitHub Actions CI/CD setups"

https://docs.zizmor.sh/

https://github.com/zizmorcore/zizmor

https://github.com/zizmorcore/zizmor-pre-commit

Start with the repository's pre-commit configuration and the linked zizmor-pre-commit documentation, then review the linked zizmor documentation for the intended hook setup. Done means zizmor is registered for the repository's GitHub Actions checks and the existing pre-commit checks pass.

Written by the indexing model from the issue text.