chore: add zizmor-pre-commit to limit GH Actions vulnerabilities

[mkniewallner]

PR Checklist

• A description of the changes is added to the description of this PR.
• If there is a related issue, make sure it is linked to this PR.
• If you've fixed a bug or added code that should be tested, add tests!
• If you've added or modified a feature, documentation in docs is updated

Description of changes

Add https://github.com/woodruffw/zizmor-pre-commit to detect and prevent vulnerabilities in GH Actions workflows.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 93.0%. Comparing base (14cede0) to head (fe2461a).
Report is 1 commits behind head on main.

Additional details and impacted files

@@          Coverage Diff          @@
##            main    #972   +/-   ##
=====================================
  Coverage   93.0%   93.0%           
=====================================
  Files         37      37           
  Lines        994     994           
  Branches      98      98           
=====================================
  Hits         925     925           
  Misses        55      55           
  Partials      14      14           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.