Add a `pip-audit` workflow

[woodruffw]

NFC. Uses pip-audit to scan for known vulnerabilities in dependencies.

[montyly]

thanks @woodruffw