Stop suppressing ref-version-mismatch for the allowlist check

The suppression existed because that pin carried a "# main" comment, which
can never match the commit it names. Now that it names a released tag,
zizmor resolves the comment to exactly the pinned commit and reports
nothing, so the workflow can be checked like every other one.

Author: potiuk

.github/zizmor.yml

@@ -19,9 +19,3 @@
 rules:
   secrets-outside-env:
     disable: true
-  # apache/infrastructure-actions is branch-tracked (no version tags); we pin it
-  # by commit SHA with a "# main" comment on purpose, so zizmor's expectation of a
-  # version-matching comment does not apply to that pin.
-  ref-version-mismatch:
-    ignore:
-      - asf-allowlist-check.yml