chore(gha): run uvx zizmor --fix=all (#6342)

.github/workflows/pr-python-tests.yml

@@ -28,6 +28,8 @@ jobs:
 
     - name: Checkout code
       uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # ratchet:actions/checkout@v4
+      with:
+        persist-credentials: false
 
     - name: Setup Python and Install Dependencies
       uses: ./.github/actions/setup-python-and-install-dependencies