Add zizmor static analysis tool

[musaabhasan]

Summary

• add zizmor to the static analysis tool catalog
• classify it under CI, security, and YAML workflow analysis

Rationale

zizmor is a maintained open-source scanner for GitHub Actions workflow security. It helps identify risky CI/CD patterns such as excessive token permissions, template injection exposure, credential persistence, and unsafe workflow references.

Validation

• added a single tool entry under data/tools/
• followed the repository's contribution format
• local render was not run because Rust/Cargo is not installed in this workstation environment