pre-commit: add `zizmor` a static analysis tool for GitHub Actions

"zizmor is a static analysis tool for GitHub Actions.

It can find many common security issues in typical GitHub Actions CI/CD setups"

https://docs.zizmor.sh/

https://github.com/zizmorcore/zizmor

https://github.com/zizmorcore/zizmor-pre-commit

先查看仓库的 pre-commit 配置和链接的 zizmor-pre-commit 文档，然后查看链接的 zizmor 文档，了解预期的 hook 设置。完成的标准是 zizmor 已为仓库的 GitHub Actions 检查注册，并且现有的 pre-commit 检查通过。

由索引模型根据 Issue 内容生成。