ci: Update zizmor.yml config

Added `github/codeql-action/*` to unpinned-uses policy.

Author: ValuedMammal

.github/zizmor.yml

@@ -5,4 +5,5 @@ rules:
       policies:
         # Allow pin by ref/tag
         actions-rust-lang/setup-rust-toolchain: ref-pin
+        github/codeql-action/*: ref-pin
         actions/*: ref-pin