ci: Check CI workflows with `zizmor` (#2413) #661

Job	Run time
toolchains	3s
Ensure `Cargo.lock` contains all required dependencies	5s
check (ubuntu-latest, 1.76.0, debug)	1m 48s
check (ubuntu-latest, stable, debug)	1m 44s
check (ubuntu-latest, nightly, debug)	3m 8s
check (ubuntu-24.04-arm, 1.76.0, debug)	1m 58s
check (ubuntu-24.04-arm, stable, debug)	2m 14s
check (ubuntu-24.04-arm, nightly, debug)	3m 9s
check (macos-latest, 1.76.0, debug)	2m 5s
check (macos-latest, stable, debug)	2m 22s
check (macos-latest, nightly, debug)	4m 34s
check (windows-latest, 1.76.0, debug)	3m 43s
check (windows-latest, stable, debug)	4m 23s
check (windows-latest, nightly, debug)	6m 1s
check (ubuntu-latest, stable, release)	5m 8s
bench / Benchmark	1s
	42m 26s

Provide feedback