Investigate adding zizmor for linting our GitHub Actions

[SamWilsn]

https://github.com/zizmorcore/zizmor

It's a tool for detecting common security issues in GitHub Actions.