pre-commit: Placate zizmor by adding dependabot cooldown configurations

[cclauss]

These changes are currently blocking:

• [pre-commit.ci] pre-commit autoupdate #1293

% uvx zizmor --fix=safe .

• https://docs.astral.sh/uv
• https://pypi.org/project/zizmor
• https://docs.zizmor.sh/audits/#dependabot-cooldown

@seifertm

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.64%. Comparing base (7a69596) to head (17b8ebf).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1295   +/-   ##
=======================================
  Coverage   93.64%   93.64%           
=======================================
  Files           2        2           
  Lines         409      409           
  Branches       44       44           
=======================================
  Hits          383      383           
  Misses         20       20           
  Partials        6        6           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[seifertm]

Thanks!

I agree that it makes sense to follow zizmor's recommendation here.