ci: enable caching for GoReleaser and ignore zizmor warning (#2709)

Enabled Go caching in the `docker` job of `checks.yml` by removing
`cache: false`. Added a `zizmor` configuration file to ignore the
`cache-poisoning` warning for this workflow, and updated the `zizmor`
workflow to use this configuration.

---------

Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>

Author: cuixq

.github/workflows/checks.yml

@@ -158,7 +158,6 @@ jobs:
         with:
           go-version-file: "go.mod"
           check-latest: true
-          cache: false
       - uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
       - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
       - name: Run GoReleaser

.github/workflows/zizmor.yml

@@ -23,3 +23,5 @@ jobs:
 
       - name: Run zizmor 🌈
         uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
+        with:
+          arguments: "--config .github/zizmor-config.yml"

.github/zizmor-config.yml

@@ -0,0 +1,4 @@
+rules:
+  cache-poisoning:
+    ignore:
+      - .github/workflows/checks.yml