Use zizmor to audit github actions

[notmandatory]

Describe the enhancement

We should audit github actions to make sure an attacker can't publish compromised bdk-ffi binaries.

see: https://discord.com/channels/753336465005608961/754077749282471937/1317184034010435625

Use case

See documentation for zizmor.

Additional context

See: https://github.com/bitcoindevkit/bdk/issues/1775.

[aagbotemi]

Hello @notmandatory, what's the progress status on the issue? I would like to work on it.

[thunderbiscuit]

Feel free to pick it up @aagbotemi!

[aagbotemi]

Alright.