ci: add zizmor workflow

[Sheraff]

Summary

• Add a pinned zizmor GitHub Actions security analysis workflow.
• Pin existing workflow actions, disable checkout credential persistence, narrow write permissions, and fix reported template-injection/token-push issues.

[pkg-pr-new]

More templates

• todos
• offline-first-electron
• tanstack-start-example-basic
• @tanstack/db-example-paced-mutations-demo
• tanstack-start-db-projects-example
• @tanstack/db-example-react-todo
• offline-transactions-react-native
• shopping-list-react-native
• @tanstack/db-example-solid-todo

@tanstack/angular-db

npm i https://pkg.pr.new/@tanstack/angular-db@1525

@tanstack/browser-db-sqlite-persistence

npm i https://pkg.pr.new/@tanstack/browser-db-sqlite-persistence@1525

@tanstack/capacitor-db-sqlite-persistence

npm i https://pkg.pr.new/@tanstack/capacitor-db-sqlite-persistence@1525

@tanstack/cloudflare-durable-objects-db-sqlite-persistence

npm i https://pkg.pr.new/@tanstack/cloudflare-durable-objects-db-sqlite-persistence@1525

@tanstack/db

npm i https://pkg.pr.new/@tanstack/db@1525

@tanstack/db-ivm

npm i https://pkg.pr.new/@tanstack/db-ivm@1525

@tanstack/db-sqlite-persistence-core

npm i https://pkg.pr.new/@tanstack/db-sqlite-persistence-core@1525

@tanstack/electric-db-collection

npm i https://pkg.pr.new/@tanstack/electric-db-collection@1525

@tanstack/electron-db-sqlite-persistence

npm i https://pkg.pr.new/@tanstack/electron-db-sqlite-persistence@1525

@tanstack/expo-db-sqlite-persistence

npm i https://pkg.pr.new/@tanstack/expo-db-sqlite-persistence@1525

@tanstack/node-db-sqlite-persistence

npm i https://pkg.pr.new/@tanstack/node-db-sqlite-persistence@1525

@tanstack/offline-transactions

npm i https://pkg.pr.new/@tanstack/offline-transactions@1525

@tanstack/powersync-db-collection

npm i https://pkg.pr.new/@tanstack/powersync-db-collection@1525

@tanstack/query-db-collection

npm i https://pkg.pr.new/@tanstack/query-db-collection@1525

@tanstack/react-db

npm i https://pkg.pr.new/@tanstack/react-db@1525

@tanstack/react-native-db-sqlite-persistence

npm i https://pkg.pr.new/@tanstack/react-native-db-sqlite-persistence@1525

@tanstack/rxdb-db-collection

npm i https://pkg.pr.new/@tanstack/rxdb-db-collection@1525

@tanstack/solid-db

npm i https://pkg.pr.new/@tanstack/solid-db@1525

@tanstack/svelte-db

npm i https://pkg.pr.new/@tanstack/svelte-db@1525

@tanstack/tauri-db-sqlite-persistence

npm i https://pkg.pr.new/@tanstack/tauri-db-sqlite-persistence@1525

@tanstack/trailbase-db-collection

npm i https://pkg.pr.new/@tanstack/trailbase-db-collection@1525

@tanstack/vue-db

npm i https://pkg.pr.new/@tanstack/vue-db@1525

commit: db63904