MAINT: Add Zizmor as GHA #2458

Job	Run time
GHA Security Analysis using Zizmor	21s
should run ci	7s
cache-pixi-lock	1m 23s
TypeChecking: pixi run typing	1m 23s
build-and-upload-nightly-parcels	2m 21s
Unit tests: ubuntu \| pixi run -e test-py311 tests	4m 53s
Unit tests: ubuntu \| pixi run -e test tests	3m 55s
Unit tests: ubuntu \| pixi run -e test-py313 tests	4m 55s
Unit tests: windows \| pixi run -e test tests	9m 52s
Unit tests: ubuntu \| pixi run -e test-minimum tests	5m 9s
Integration: ${{ matrix.os }} \| pixi run -e ${{ matrix.pixi-environment }} tests-notebooks	0s
merge-test-artifacts	0s
	34m 19s

Provide feedback