fix(ci): resolve all zizmor findings and add zizmor pre-commit checks#257

rapids-bot[bot] merged 8 commits into

rapidsai:mainrapidsai/gha-tools:mainfrom

gforsyth:securitizegforsyth/gha-tools:securitizeCopy head branch name to clipboard