ci: Remove zizmor/frizbee from goCI, fix actionci default, rename jobs

- Change actionci.yml zizmor-advanced-security default to false (matching
  zizmor.yml). Public repos must explicitly opt in.
- Remove zizmor and frizbee jobs from goCI.yml to avoid duplicate runs
  for repos that use both goCI.yml and actionci.yml.
- Rename job display names to just "zizmor" and "frizbee".

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: tashian

.github/workflows/actionci.yml

@@ -17,7 +17,7 @@ on:
         description: Upload zizmor results to GitHub Advanced Security
         required: false
         type: boolean
-        default: true
+        default: false
 
 permissions:
   contents: read

.github/workflows/frizbee.yml

@@ -4,7 +4,7 @@ on:
 
 jobs:
   frizbee:
-    name: Check action pinning
+    name: frizbee
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

.github/workflows/goCI.yml

@@ -145,12 +145,6 @@ jobs:
       PAT: ${{ secrets.PAT }}
       CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 
-  zizmor:
-    uses: ./.github/workflows/zizmor.yml
-
-  frizbee:
-    uses: ./.github/workflows/frizbee.yml
-
   build:
     uses: ./.github/workflows/goBuild.yml
     if: inputs.run-build

.github/workflows/zizmor.yml

@@ -9,7 +9,7 @@ on:
 
 jobs:
   zizmor:
-    name: Scan GitHub workflows
+    name: zizmor
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2