Validate all zizmor ignore in apache/iceberg* repos

[kevinjqliu]

Follow up to #15742

"zizmor: ignore" should only be used when absolutely necessary.
https://github.com/search?q=org%3Aapache%20zizmor%3A%20ignore&type=code

I think in some places we can remove the use of zizmor ignore by setting the the min-severity and min-confidence to medium, like how its specified in Polaris

Check for all apache/iceberg* repos:

• apache/iceberg
• apache/iceberg-python
• apache/iceberg-rust
• apache/iceberg-go
• apache/iceberg-cpp
• apache/iceberg-terraform

[kevinjqliu]

Only apache/iceberg (#16001) and apache/iceberg-cpp (apache/iceberg-cpp#620) are affected