chore(CI): add zizmor

[stormslowly]

Summary

Related links

Checklist

• Tests updated (or not required).
• Documentation updated (or not required).

[netlify]

✅ Deploy Preview for rspack canceled.

Name	Link
🔨 Latest commit	0d88992
🔍 Latest deploy log	https://app.netlify.com/projects/rspack/deploys/68afd28329708200086730e0

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[github-actions]

📦 Binary Size-limit

Comparing 0d88992 to perf: improve data structures of bundle splitting (#11506) by harpsealjs

🙈 Size remains the same at 47.59MB

[codspeed-hq]

CodSpeed Performance Report

Merging #11518 will not alter performance

_{Comparing feat/enable_zizmor (0d88992) with main (e8b2dc3)}

🎉 Hooray! codspeed-rust just leveled up to 2.7.2!

A heads-up, this is a breaking change and it might affect your current performance baseline a bit. But here's the exciting part - it's packed with new, cool features and promises improved result stability 🥳!
Curious about what's new? Visit our releases page to delve into all the awesome details about this new version.

Summary

✅ 17 untouched benchmarks