ci: Add linting job with GitHub Actions with zizmor.

Author: seifertm

.github/workflows/main.yml

@@ -100,10 +100,16 @@ jobs:
         path: coverage/coverage.*
         if-no-files-found: error
 
+  lint-github-actions:
+    name: Lint GitHub Actions
+    permissions:
+      security-events: write
+    uses: zizmorcore/workflow/.github/workflows/reusable-zizmor.yml@1ae473d8672fe7613e809d86d202a35063736e16
+
   check:
     name: Check
     if: always()
-    needs: [lint, test]
+    needs: [lint, lint-github-actions, test]
     runs-on: ubuntu-latest
     steps:
     - name: Decide whether the needed jobs succeeded or failed