MAINT: Add Zizmor as GHA (#2573) #2459

Job	Run time
should run ci	5s
GHA Security Analysis using Zizmor	14s
cache-pixi-lock	1m 14s
TypeChecking: pixi run typing	1m 30s
build-and-upload-nightly-parcels	2m 42s
Unit tests: ubuntu \| pixi run -e test-py311 tests	5m 8s
Unit tests: ubuntu \| pixi run -e test tests	3m 48s
Unit tests: ubuntu \| pixi run -e test-minimum tests	4m 57s
Unit tests: windows \| pixi run -e test tests	10m 37s
Unit tests: ubuntu \| pixi run -e test-py313 tests	4m 57s
Integration: ${{ matrix.os }} \| pixi run -e ${{ matrix.pixi-environment }} tests-notebooks	0s
merge-test-artifacts	0s
	35m 12s

Provide feedback