[pre-commit.ci] pre-commit autoupdate (add zizmor config to allow ref-pinned actions)

[pre-commit.ci] pre-commit autoupdate (add zizmor config to allow ref-pinned actions) #157