ci: add zizmor workflow (#440) view more