ci: add zizmor security scanning for GitHub Actions workflows (#3053)

Adds a CI job that runs the [zizmor](https://docs.zizmor.sh) static
analyzer over the workflow files under `.github/`.

`zizmor` audits GitHub Actions workflows for supply-chain and
privilege-escalation weaknesses — unpinned action references, credential
persistence through the checkout token, template injection via `${{ ...
}}` expansion in `run:` blocks, and overly broad `GITHUB_TOKEN`
permissions.

This is a CI/configuration-only change; no library code, tests, or
documentation are affected. 1bfd8e6

Author: github-actions[bot]

reference/comparison.html

@@ -1055,7 +1055,7 @@
 <h1>Comparison Table NumPy/ DPNP/ CuPy<a class="headerlink" href="#comparison-table-numpy-dpnp-cupy" title="Link to this heading">¶</a></h1>
 <p>Here is a list of NumPy and CuPy APIs and its corresponding DPNP implementations.</p>
 <p><code class="docutils literal notranslate"><span class="pre">-</span></code> in DPNP column means that DPNP implementation is not provided yet.</p>
-<p><strong>NumPy(v2.5.2) / DPNP(v0.21.0dev7+10.g5da183e958f) / CuPy(v14.2.0) APIs</strong></p>
+<p><strong>NumPy(v2.5.2) / DPNP(v0.21.0dev7+11.g1bfd8e6f6fe) / CuPy(v14.2.0) APIs</strong></p>
 <section id="summary">
 <h2>Summary<a class="headerlink" href="#summary" title="Link to this heading">¶</a></h2>
 <div class="table-wrapper docutils container">