JIT

Add zizmor to pre-commit and fix most findings #2325

Job	Run time
Interpreter (Debug)	7m 38s
Free-Threaded (Debug) (19)	11m 47s
i686-pc-windows-msvc/msvc (Debug)	18m 49s
i686-pc-windows-msvc/msvc (Release)	11m 18s
x86_64-pc-windows-msvc/msvc (Debug)	18m 15s
x86_64-pc-windows-msvc/msvc (Release)	11m 57s
aarch64-pc-windows-msvc/msvc (Debug)	4m 49s
aarch64-pc-windows-msvc/msvc (Release)	6m 6s
x86_64-apple-darwin/clang (Debug)	12m 43s
x86_64-apple-darwin/clang (Release)	10m 19s
aarch64-apple-darwin/clang (Debug)	8m 59s
aarch64-apple-darwin/clang (Release)	9m 10s
x86_64-unknown-linux-gnu/gcc (Debug)	8m 40s
x86_64-unknown-linux-gnu/gcc (Release)	5m 58s
aarch64-unknown-linux-gnu/gcc (Debug)	8m 6s
aarch64-unknown-linux-gnu/gcc (Release)	10m 45s
	2h 45m 19s

Provide feedback