Use Zizmor to Detect Security Vulnerabilities in GitHub Actions Workflows

[vivodi]

Motivation for changes:

This PR integrates Zizmor to identify security vulnerabilities in GitHub Actions workflows. By leveraging Zizmor, we can proactively detect misconfigurations and potential security risks, improving the overall security posture of our CI/CD pipelines.

Benefits:

• Early detection of security issues in GitHub Actions workflows
• Automated scanning to ensure best practices are followed
• Improved security compliance with minimal manual effort

Notably, projects such as astral-sh/ruff and python-telegram-bot have also adopted Zizmor for security scanning in their repositories.

Let me know if any adjustments or additional configurations are needed! 🚀

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.