Add `zizmor` with pre-commit

[jbampton]

"zizmor is a static analysis tool for GitHub Actions.

It can find many common security issues in typical GitHub Actions CI/CD setups"

https://docs.zizmor.sh/

https://github.com/zizmorcore/zizmor

https://github.com/zizmorcore/zizmor-pre-commit

[Swastyy]

Hi @jbampton, is this issue available to be picked up?

[jbampton]

@Swastyy you can work on this if you can add a zizmor config file and the various audit rules and ignores and test locally with pre-commit.

We have docs on pre-commit here:

https://sedona.apache.org/latest-snapshot/setup/compile/#pre-commit

We have a PR for this but the developer was not able to implement the audit rules and ignores.