Merge pull request #417 from cortex/dependabot/cargo/tar-0.4.45

Merge pull request #418 from cortex/dependabot/cargo/rustls-webpki-0.103.10

Bump rustls-webpki from 0.103.9 to 0.103.10

Bump tar from 0.4.44 to 0.4.45

Merge pull request #416 from cortex/dependabot/cargo/quinn-proto-0.11.14

Bump quinn-proto from 0.11.13 to 0.11.14

Merge pull request #413 from cortex/cargo-toml-warning

remove two warnings about unused keys in Cargo.toml when doing cargo build

Merge pull request #411 from cortex/add-zizmor

Merge pull request #412 from cortex/clippy-1.94

fix clippy lint

also add CodeQL

try to un-flake tests

make the test_verify_gpg_id_files_untrusted_key_in_keyring test less flaky

introduce zizmor and fix lints