JIT

Add zizmor to pre-commit and fix most findings (#127749) #156

Job	Run time
Interpreter (Debug)	7m 36s
Free-Threaded (Debug)	9m 43s
i686-pc-windows-msvc/msvc (Debug)	3m 18s
i686-pc-windows-msvc/msvc (Release)	3m 33s
x86_64-pc-windows-msvc/msvc (Debug)	2m 17s
x86_64-pc-windows-msvc/msvc (Release)	2m 38s
aarch64-pc-windows-msvc/msvc (Debug)	3m 18s
aarch64-pc-windows-msvc/msvc (Release)	2m 58s
x86_64-apple-darwin/clang (Debug)	9m 53s
x86_64-apple-darwin/clang (Release)	9m 46s
aarch64-apple-darwin/clang (Debug)	8m 55s
aarch64-apple-darwin/clang (Release)	9m 44s
x86_64-unknown-linux-gnu/gcc (Debug)	8m 47s
x86_64-unknown-linux-gnu/gcc (Release)	9m 43s
x86_64-unknown-linux-gnu/clang (Debug)	8m 3s
x86_64-unknown-linux-gnu/clang (Release)	9m 44s
aarch64-unknown-linux-gnu/gcc (Debug)	9m 44s
aarch64-unknown-linux-gnu/gcc (Release)	9m 42s
aarch64-unknown-linux-gnu/clang (Debug)	9m 43s
aarch64-unknown-linux-gnu/clang (Release)	9m 44s
	2h 28m 49s

Provide feedback