ci: Check CI workflows with `zizmor` #5567

Job	Run time
Ensure `Cargo.lock` contains all required dependencies	5s
toolchains	4s
check (ubuntu-latest, 1.76.0, debug)	23s
check (ubuntu-latest, stable, debug)	25s
check (ubuntu-latest, nightly, debug)	20s
check (ubuntu-24.04-arm, 1.76.0, debug)	20s
check (ubuntu-24.04-arm, stable, debug)	22s
check (ubuntu-24.04-arm, nightly, debug)	24s
check (macos-latest, 1.76.0, debug)	1m 58s
check (macos-latest, stable, debug)	1m 41s
check (macos-latest, nightly, debug)	3m 0s
check (windows-latest, 1.76.0, debug)	4m 24s
check (windows-latest, stable, debug)	3m 45s
check (windows-latest, nightly, debug)	5m 40s
check (ubuntu-latest, stable, release)	19s
bench	0s
	23m 10s

Provide feedback