Consider adding `zizmor` prek hook with GHA analysis

[paddyroddy]

@dpshelio shared https://github.com/zizmorcore/zizmor recently. I've tried it on one of my codes out of interest. astro-informatics/sleplet#481 shows what changes I had to make including a couple of rule suppressions.