Update zizmor to 1.32.0 (#12361)

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Author: mozzius

.github/workflows/claude-mention.yml

@@ -5,7 +5,11 @@ name: claude-mention
 # bluesky-social/.github.
 
 on:
-  issue_comment:
+  # issue_comment is how @claude is reached from the PR conversation tab. The
+  # reusable workflow only answers same-repository PRs from commenters with
+  # write access, and passes the comment body to the model as action input,
+  # never through a shell.
+  issue_comment: # zizmor: ignore[dangerous-triggers]
     types: [created]
   pull_request_review_comment:
     types: [created]

.github/workflows/zizmor.yml

@@ -33,7 +33,7 @@ jobs:
           persist-credentials: false
 
       - name: 🛡️ Run zizmor
-        uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4
+        uses: zizmorcore/zizmor-action@45d7276c9ca790aabd705e31ca99c6185c3e76dd # v0.8.1
         with:
           # Annotate the PR directly instead of uploading SARIF to the
           # security tab, and fail the check on any finding