tidy #7 [CI] Add Zizmor GitHub Actions security scanning (Kocal)

This PR was merged into the main branch.

Discussion
----------

[CI] Add Zizmor GitHub Actions security scanning

| Q             | A
| ------------- | ---
| Bug fix?      | no
| New feature?  | no
| Deprecations? | no
| Issues        | Fix #... <!-- prefix each issue number with "Fix #", no need to open an issue if none exists, explain below instead -->
| License       | MIT

<!--
Replace this notice with a description of your feature or bugfix.
This helps reviewers and is a good starting point for the documentation.

Additionally (see https://symfony.com/releases):
 - Always add tests and ensure they pass.
 - For new features, provide some code snippets to help understand usage.
 - Features and deprecations must be submitted against the main branch.
 - Update or add documentation as required (we can help!).
 - Never break backward compatibility (see https://symfony.com/bc).
-->

Commits
-------

8ede04b [CI] Add Zizmor GitHub Actions security scanning

Author: Kocal

.github/workflows/zizmor.yaml

@@ -0,0 +1,27 @@
+name: Zizmor GitHub Actions security analysis
+
+on:
+    push:
+        branches:
+            - main
+    pull_request:
+        branches:
+            - '**'
+
+permissions: {}
+
+jobs:
+    zizmor:
+        name: Run Zizmor
+        runs-on: ubuntu-latest
+        permissions:
+            security-events: write # Required for zizmor-action to upload the SARIF report.
+            contents: read # Needed to clone the repo (private repos).
+            actions: read # Needed for upload-sarif to read workflow run info (private repos).
+        steps:
+            - name: Checkout
+              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+              with:
+                  persist-credentials: false
+            - name: Run Zizmor
+              uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7