zizmor: Add stdin support (#924)

As of zizmor 1.24.0, zizmor supports stdin by passing "-". When the json
output indicates diagnostic data for stdin, there won't be a filename,
so use the bufnr parameter passed to the parser.