Integrate with rustsec/cargo-audit to check lockfile before attempting to create the ebuild

[gyakovlev]

And make a switch to disable it, but it should be enabled by default. In some rare cases it's ok to add vulnerable crate.