Make zizmor collection strict

[adamtheturtle]

Note

Tightens GitHub workflow policy checks in pre-commit.

• Updates zizmor hook to run with --strict-collection against .github

^{Written by Cursor Bugbot for commit 7299ced. This will update automatically on new commits. Configure here.}