Usage of Zizmor

Issue for discussing & tracking adoption of https://github.com/zizmorcore/zizmor across our repos.

I personally don't have experience with the tool, but I am +1 to its adoption since afaict it will be a net benefit