ci: harmonize ruff and zizmor workflow configuration - #15713

Describe your change

• Add an algorithm?
• Fix a bug or typo in an existing algorithm?
• Add or change doctests? -- Note: Please avoid changing both code and tests in a single pull request.
• Documentation change?

This is a CI/tooling change, not an algorithm. ruff check . already passes with target-version = "py315" and zizmor reports no findings under the existing config, so no code fixes were needed. Changes:

• ruff.yml: add permissions: contents: read, replace the dead beta.ruff.rs link, and add a zizmor job that uses .github/zizmor.yml (zizmor was not run in CI before).
• zizmor.yml: add a docs link comment.

Checklist

• I have read CONTRIBUTING.md.
• This pull request is all my own work -- I have not plagiarized.
• I know that pull requests will not be merged if they fail the automated tests.
• This PR only changes one algorithm file. To ease review, please open separate PRs for separate algorithms.
• All new Python files are placed inside an existing directory.
• All filenames are in all lowercase characters with no spaces or dashes.
• All functions and variable names follow Python naming conventions.
• All function parameters and return values are annotated with Python type hints.
• All functions have doctests that pass the automated testing.
• All new algorithms include at least one URL that points to Wikipedia or another similar explanation.
• If this pull request resolves one or more open issues, then the description above includes the issue number(s) with a closing keyword: "Fixes #ISSUE-NUMBER".

Fixes #15696

🤖 Generated with Claude Code