fix: ignore zizmor finding in sonar-scan

Author: Vombato

.github/workflows/sonar-scan.yml

@@ -4,7 +4,7 @@ on:
     push:
         branches:
             - main
-    pull_request_target:
+    pull_request_target: # zizmor: ignore[dangerous-triggers] # Accepted risk, minimal impact.
 
 jobs:
     sonar-scan: