chore(ci): address zizmor findings#1932

ncoghlan merged 4 commits intomainpypa/packaging.python.org:mainfrom

ww/zizmor-fixespypa/packaging.python.org:ww/zizmor-fixesCopy head branch name to clipboard