ci: Check CI workflows with `zizmor` #5576

Job	Run time
Ensure `Cargo.lock` contains all required dependencies	6s
toolchains	4s
check (ubuntu-latest, 1.76.0, debug)	1m 44s
check (ubuntu-latest, stable, debug)	1m 55s
check (ubuntu-latest, nightly, debug)	3m 23s
check (ubuntu-24.04-arm, 1.76.0, debug)	2m 0s
check (ubuntu-24.04-arm, stable, debug)	2m 2s
check (ubuntu-24.04-arm, nightly, debug)	3m 7s
check (macos-latest, 1.76.0, debug)	2m 26s
check (macos-latest, stable, debug)	1m 51s
check (macos-latest, nightly, debug)	3m 58s
check (windows-latest, 1.76.0, debug)	3m 55s
check (windows-latest, stable, debug)	4m 45s
check (windows-latest, nightly, debug)	6m 25s
check (ubuntu-latest, stable, release)	5m 28s
bench / Benchmark	1m 6s
	44m 15s

Provide feedback