ci: adding more precommit hooks

[germa89]

Description

As the title.

[Copilot]

Pull request overview

This PR updates the pre-commit configuration to use commit SHA references instead of version tags for better reproducibility and adds two new security-focused hooks: zizmor for GitHub workflow security analysis and bandit for Python security checks.

• Replaced version tags with commit SHAs for all existing hooks
• Added zizmor hook for GitHub workflow security scanning
• Added bandit hook for Python code security analysis

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[germa89]

@pyansys-ci-bot LGTM.

[pyansys-ci-bot]

✅ Approving this PR because germa89 said so in here 😬

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.28%. Comparing base (bdc8a68) to head (abb4a10).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4345      +/-   ##
==========================================
+ Coverage   91.27%   91.28%   +0.01%     
==========================================
  Files         196      196              
  Lines       15977    15977              
==========================================
+ Hits        14583    14585       +2     
+ Misses       1394     1392       -2     

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.