Fix zizmor PATH issue in CI by using pipx run

pipx run executes directly without needing the binary on PATH.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.github/workflows/ci.yml

@@ -49,10 +49,8 @@ jobs:
           sudo mv actionlint /usr/local/bin/
       - name: Lint GitHub Actions
         run: actionlint
-      - name: Install zizmor
-        run: pipx install zizmor
       - name: Audit GitHub Actions security
-        run: zizmor .github/workflows/
+        run: pipx run zizmor .github/workflows/
 
   frontend-lint:
     runs-on: ubuntu-latest