chore: use latest for actionlint/zizmor and expand zizmor scope (#2658)

- Set actionlint and zizmor to `latest` in .tool-versions
- Expand zizmor audit scope to .github/ to include composite actions

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: devmgn

.tool-versions

@@ -1,4 +1,4 @@
-actionlint 1.7.11
+actionlint latest
 nodejs     24.14.1
 pnpm       10.32.1
-zizmor     1.23.1
+zizmor     latest

package.json

@@ -10,7 +10,7 @@
     "fix": "pnpm lint:fix && pnpm fmt:fix",
     "lint": "oxlint",
     "lint:fix": "oxlint --fix",
-    "lint:workflows": "actionlint -color && zizmor .github/workflows/",
+    "lint:workflows": "actionlint -color && zizmor .github/",
     "fmt": "oxfmt --check .",
     "fmt:fix": "oxfmt --write .",
     "knip": "knip --strict --cache",