feat(zizmor): Add Zizmor Static Analysis

[bkochendorfer]

This pull request

Zizmor is a Static Analysis tool for GitHub Actions https://woodruffw.github.io/zizmor/usage/#use-in-github-actions

Ran Zizmor locally to fix up any open issues on existing GitHub Actions. There are some caching features which were disabled based on https://woodruffw.github.io/zizmor/audits/#cache-poisoning

Checklist

Put an x in the boxes that apply

• My commit is GPG signed.
• If applicable, I have modified or added tests which pass locally.
• I have added necessary documentation (if appropriate).
• I have verified that my changes render correctly in RTL (if appropriate).

Screenshots (Optional)

Please attach the screenshots of the changes made in case of change in user interface.

Other information (Optional)

Any other information that is important to this pull request.

[vpomerleau]

Reverted, this workflow was causing PRs to fail.
To enable, need to either set uses policy to ref-pin or update actions with SHA reference (see https://woodruffw.github.io/zizmor/audits/#unpinned-uses-configuration)