ci: Check CI workflows with `zizmor` #5571

Job	Run time
Ensure `Cargo.lock` contains all required dependencies	4s
toolchains	3s
check (ubuntu-latest, 1.76.0, debug)	49s
check (ubuntu-latest, stable, debug)	1m 4s
check (ubuntu-latest, nightly, debug)	1m 56s
check (ubuntu-24.04-arm, 1.76.0, debug)	1m 12s
check (ubuntu-24.04-arm, stable, debug)	1m 11s
check (ubuntu-24.04-arm, nightly, debug)	2m 0s
check (macos-latest, 1.76.0, debug)	2m 12s
check (macos-latest, stable, debug)	2m 5s
check (macos-latest, nightly, debug)	3m 41s
check (windows-latest, 1.76.0, debug)	2m 31s
check (windows-latest, stable, debug)	1m 37s
check (windows-latest, nightly, debug)	3m 50s
check (ubuntu-latest, stable, release)	1m 6s
bench	0s
	25m 21s

Provide feedback