Make prettier more compatible with yamlfix

[adamtheturtle]

Note

Strengthens CI security and adjusts YAML formatting.

• CI: add permissions: {} and set actions/checkout persist-credentials: false across docker-build, lint, test, and release workflows
• Formatting: update .prettierrc to set YAML printWidth to 100
• Tooling: add zizmor.yml disabling select checks (unpinned-uses, cache-poisoning, bot-conditions, dependabot-cooldown, template-injection)

^{Written by Cursor Bugbot for commit 694ce56. This will update automatically on new commits. Configure here.}

[cursor]

persist-credentials breaks git-auto-commit push in release workflow

Adding persist-credentials: false to the checkout step removes git credentials after checkout. The release workflow uses stefanzweifel/git-auto-commit-action@v7 at line 70 to push changelog commits back to the repository. Without persisted credentials, this action will fail to authenticate when pushing, completely breaking the release process. The workflow comments explicitly reference this action, confirming the dependency on git push capability.