[3.12] Add zizmor to pre-commit and fix most findings (GH-127749)

[3.12] Add zizmor to pre-commit and fix most findings (GH-127749) #135259