chore: pin all actions and enable zizmor in pre-commit

[mayeut]

No description provided.

[Copilot]

Pull request overview

This PR enhances security by pinning GitHub Actions to specific commit SHAs and adds zizmor (a security linter for GitHub Actions) to the pre-commit configuration. The changes also modify the Dependabot schedule from weekly to monthly updates.

• Pins all GitHub Actions to commit SHAs with version comments for better security and reproducibility
• Adds zizmor pre-commit hook for GitHub Actions security scanning
• Updates Dependabot to monthly intervals with cooldown configuration

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File	Description
.pre-commit-config.yaml	Adds zizmor hook for GitHub Actions workflow security scanning
.github/workflows/test.yml	Pins actions/checkout, actions/setup-python, actions/cache, docker/setup-qemu-action, pre-commit/action, and codecov/codecov-action to commit SHAs
.github/workflows/release.yml	Pins actions/checkout and actions/download-artifact to commit SHAs
.github/dependabot.yml	Changes update interval from weekly to monthly and adds cooldown configuration

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.24%. Comparing base (dbef2a6) to head (75359da).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #666   +/-   ##
=======================================
  Coverage   95.24%   95.24%           
=======================================
  Files          22       22           
  Lines        1829     1829           
  Branches      343      343           
=======================================
  Hits         1742     1742           
  Misses         48       48           
  Partials       39       39           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.