Remove stale unpinned-uses ignores from zizmor config

The goreleaser.yml google-github-actions refs are now pinned to SHAs,
so the unpinned-uses suppressions are no longer needed.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: tashian

.github/zizmor.yml

@@ -1,11 +1,4 @@
 rules:
-  # Internal reusable workflows (smallstep/*@main) intentionally track
-  # the main branch for centralized CI management. Pinning to a SHA
-  # would defeat the purpose of the shared workflows repo.
-  unpinned-uses:
-    ignore:
-      - goreleaser.yml:133
-      - goreleaser.yml:141
   # These workflows either lack a top-level `permissions:` block
   # (using GitHub defaults) or delegate to reusable workflows that
   # declare their own minimal permissions internally.