ci(actions): Validate GitHub actions with zizmor

Signed-off-by: Joas Schilling <coding@schilljs.com>

.github/workflows/lint-yaml.yml

@@ -19,10 +19,18 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
 
       - name: GitHub action templates lint
         uses: ibiqlik/action-yamllint@2576378a8e339169678f9939646ee3ee325e845c # v3.1.1
         with:
           file_or_dir: workflow-templates
           config_data: |
             line-length: warning
+
+      - name: Install the latest version of uv
+        uses: astral-sh/setup-uv@38f3f104447c67c051c4a08e39b64a148898af3a # v4.2.0
+
+      - name: Run zizmor
+        run: uvx zizmor --min-severity medium