☔ [gha] pin slsa-github-generator and add yaml header line for zizmor

[chicks-net]

Done

• ☔ [gha] pin slsa-github-generator and add yaml header line for zizmor

Meta

(Automated in .just/gh-process.just.)

[Copilot]

Pull request overview

This PR updates GitHub automation configuration to satisfy supply-chain tooling requirements by (1) adding an explicit YAML document header for zizmor parsing and (2) pinning the SLSA reusable workflow reference to an immutable commit SHA.

Changes:

• Add --- YAML document start marker to .github/zizmor.yml.
• Pin slsa-framework/slsa-github-generator reusable workflow in the release workflow to a full commit SHA (with the corresponding version noted in a comment).

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/zizmor.yml	Adds a YAML document header to improve/ensure tooling compatibility (zizmor).
.github/workflows/release.yml	Replaces a version tag with a commit-SHA pin for the SLSA provenance generator reusable workflow.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.