Merge pull request #88 from zxzxwu/fix-zizmor

ci: Fix Zizmor security findings across workflows