chore(zizmor): pilot reusable from fork branch feat/zizmor-vendor-excludes-326 (#326)

Point self-zizmor at isaiah-grafana/shared-workflows by branch ref so the
ruleset pilot picks up workflow changes without bumping SHAs.

Made-with: Cursor

Author: isaiah-grafana

.github/workflows/self-zizmor.yaml

@@ -45,7 +45,9 @@ jobs:
       - zizmor-check
     if: ${{ needs.zizmor-check.outputs.found-files == 'true' }}
 
-    uses: grafana/shared-workflows/.github/workflows/reusable-zizmor.yml@5cec40ba1a943db268a9bb33f208c006b161d372
+    # Pilot (#326): reusable from fork branch (not SHA) so ruleset testing tracks latest shared-workflows changes.
+    # Swap back to grafana/shared-workflows@<SHA> on main when done.
+    uses: isaiah-grafana/shared-workflows/.github/workflows/reusable-zizmor.yml@feat/zizmor-vendor-excludes-326
     with:
       runs-on: ${{ !github.event.repository.private && 'ubuntu-latest' || 'ubuntu-arm64-small' }}
       fail-severity: high