Complete zizmor backports #3341
Description
I don't think we need to integrate the zizmor session into the noxfile or add any of the comments related to zizmor. Totally open to suggestions there.
I would definitely integrate zizmor across branches. I see no downside to enabling it (other than initial setup work) and only upsides. The workflows have the potential to diverge so we should make sure they all pass the linter on each branch.
Originally posted by @gotmax23 in #3331 (comment)
I reviewed #3331 and ran zizmor locally on it, and it still has errors, so I think the backports should be double checked and also have zizmor workflows added along with them.