ci: add zizmor workflow

[Sheraff]

Summary

• Add a zizmor GitHub Actions security analysis workflow for pushes to alpha and all pull requests.
• Pin existing workflow actions and disable checkout credential persistence where needed so the repository passes zizmor's regular persona policy.

[pkg-pr-new]

• @tanstack/time-example-react-basic
• @tanstack/time-example-react-timeline

@tanstack/react-time

npm i https://pkg.pr.new/TanStack/time/@tanstack/react-time@19

@tanstack/react-time-devtools

npm i https://pkg.pr.new/TanStack/time/@tanstack/react-time-devtools@19

@tanstack/solid-time

npm i https://pkg.pr.new/TanStack/time/@tanstack/solid-time@19

@tanstack/solid-time-devtools

npm i https://pkg.pr.new/TanStack/time/@tanstack/solid-time-devtools@19

@tanstack/time

npm i https://pkg.pr.new/TanStack/time/@tanstack/time@19

@tanstack/time-devtools

npm i https://pkg.pr.new/TanStack/time/@tanstack/time-devtools@19

commit: e23558f