ci: harden GitHub Actions workflows with zizmor #5998

Job	Run time
linting	9s
E2E live-provider tests on Python 3.13	2m 8s
E2E shard 1 tests on Python 3.13	2m 6s
Unit tests on Python 3.12	16s
Unit tests on Python 3.11	14s
Unit tests on Python 3.14	16s
type-checking	14s
Unit tests on Python 3.13	17s
Unit tests on Python 3.10	15s
E2E shard 2 tests on Python 3.13	2m 50s
all-tests-passed	4s
	8m 49s

Provide feedback