Revert "fix(ci): keep repository CI private-free"

This reverts commit f30b529.

Author: rldyourmnd

.github/workflows/ci.yml

@@ -21,6 +21,16 @@ jobs:
     permissions:
       contents: read
     steps:
+      - name: Harden runner
+        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411  # v2.19.4
+        with:
+          egress-policy: block
+          allowed-endpoints: >
+            agent.api.stepsecurity.io:443
+            github.com:443
+            api.github.com:443
+            pypi.org:443
+            files.pythonhosted.org:443
       - name: Checkout
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
         with:
@@ -38,15 +48,12 @@ jobs:
     permissions:
       contents: read
     uses: ./.github/workflows/actionlint.yml
-    with:
-      enable_harden_runner: false
 
   zizmor:
     permissions:
       contents: read
-    uses: ./.github/workflows/zizmor-no-sarif.yml
-    with:
-      enable_harden_runner: false
+      security-events: write
+    uses: ./.github/workflows/zizmor-sarif.yml
 
   ci-gate:
     name: ci-gate