adopt zizmor

[kjaymiller]

zizmor will allow us to audit our gh actions and ensure our repo is hardened against injection attacks from gh-actions

[danielcristho]

Hi @kjaymiller, I'd like to work on this task