[DEVOPS-799] do not run zizmor on draft PR

Author: sebhmg

.github/workflows/reusable-zizmor-security.yml

@@ -5,6 +5,7 @@ on:
 
 jobs:
   security_scan:
+    if: ${{ (github.event_name != 'pull_request') || (github.event.pull_request.draft == false) }}
     runs-on: ubuntu-latest
     permissions:
       contents: read