Set up a dependency auditing tool

- use pip-audit to check the project's dependencies for known
  security vulnerabilities and exploits
- add nox sessions "audit" and "audit-updates" to run
  the above checks against the pinned and unpinned dependencies