[ci] enforce zizmor checks, drop codecov#346

jameslamb merged 7 commits intomainuptake/pkgnet:mainfrom

ci/securityuptake/pkgnet:ci/securityCopy head branch name to clipboard