Fix zizmor lint

[adamtheturtle]

Upgrade zizmor to 1.23.1 and disable superfluous-actions and secrets-outside-env to fix lint failures.

Made with Cursor

---

Note

Low Risk
Low risk CI/config-only changes; primary impact is on GitHub Actions environment/secrets handling and zizmor linting behavior.

Overview
Updates the CI workflow so the build job runs under the vws GitHub Actions environment (affecting how environment-scoped secrets/policies apply).

Adjusts zizmor.yml to disable the superfluous-actions rule, reducing zizmor lint noise/failures for the workflow configuration.

^{Written by Cursor Bugbot for commit 79eebe7. This will update automatically on new commits. Configure here.}