pre-commit: we should add `zizmor` static analysis tool for GitHub Actions

[jbampton]

zizmor is a static analysis tool for GitHub Actions. It can find and fix many common security issues in typical GitHub Actions CI/CD setups.

https://github.com/zizmorcore/zizmor

https://docs.zizmor.sh/integrations/#pre-commit

[jbampton]

refs apache/sedona#2582

[lprimak]

We don't really use actions extensively enough to warrant this IMHO