chore: ignore zizmor cache poisoning because lockfile is used

Author: Davidonium

.github/workflows/release.yml

@@ -16,6 +16,7 @@ jobs:
         with:
           fetch-depth: 0
 
+      # zizmor: ignore[cache-poisoning] -- mise verifies tool checksums via mise.lock
       - uses: jdx/mise-action@5228313ee0372e111a38da051671ca30fc5a96db # v3.6.3
         with:
           version: 2026.3.8