[chore] Tooling updates

[zerolab]

• ruff, pre-commit
• Improge GHA config using https://github.com/woodruffw/zizmor

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 93.06%. Comparing base (b8b76b3) to head (eaaa7c0).
Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #843   +/-   ##
=======================================
  Coverage   93.06%   93.06%           
=======================================
  Files          47       47           
  Lines        4224     4224           
  Branches      547      547           
=======================================
  Hits         3931     3931           
  Misses        177      177           
  Partials      116      116           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.