chore: add zizmor-pre-commit
to limit GH Actions vulnerabilities
#675
validate-codecov-config.yml
on: pull_request
validate-codecov-config
5s