chore: test branch for zizmor ruleset pilot (#326)

Recreate test/zizmor-vendor-excludes-326 on grafana/security-github-actions with the same self-zizmor config as main (grafana/shared-workflows pin). Same-repo PR flow into main.

Author: isaiah-grafana