CI: auto-fix via zizmor

May include:

- Avoids risky string interpolation.
- Prevents checkout premissions from leaking

Author: tacaswell

.github/workflows/basemap-data-hires.yml

@@ -28,6 +28,8 @@ jobs:
       -
         name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       -
         name: Upload checkout
         uses: actions/upload-artifact@v4

.github/workflows/basemap-data.yml

@@ -28,6 +28,8 @@ jobs:
       -
         name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       -
         name: Upload checkout
         uses: actions/upload-artifact@v4

.github/workflows/basemap-for-manylinux.yml

@@ -28,6 +28,8 @@ jobs:
       -
         name: Checkout
         uses: actions/checkout@v1
+        with:
+          persist-credentials: false
       -
         name: Upload checkout
         uses: actions/upload-artifact@v1
@@ -322,6 +324,8 @@ jobs:
       -
         name: Checkout
         uses: actions/checkout@v1
+        with:
+          persist-credentials: false
       -
         name: Download test artifacts
         uses: actions/download-artifact@v1

.github/workflows/basemap-for-windows.yml

@@ -30,6 +30,8 @@ jobs:
       -
         name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       -
         name: Upload checkout
         uses: actions/upload-artifact@v4