Update GitHub Actions to use newer versions of checkout and zizmor

I don't know why dependabot didn't bump these, when it just did in another public repo I'm working on with the same dependabot config…

Signed-off-by: Colin Dean <colindean@users.noreply.github.com>

Author: colindean

.github/workflows/zizmor.yml

@@ -18,9 +18,9 @@ jobs:
       # actions: read          # Only needed for private repos. Needed for upload-sarif to read workflow run info.
     steps:
       - name: Checkout repository
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
 
       - name: Run zizmor 🌈
-        uses: zizmorcore/zizmor-action@e673c3917a1aef3c65c972347ed84ccd013ecda4 # v0.2.0
+        uses: zizmorcore/zizmor-action@135698455da5c3b3e55f73f4419e481ab68cdd95 # v0.4.1