Add cargo audit to CI

[ia0]

Try denying all warnings to measure the noise. We ideally want the oldest non-vulnerable version of the most recent major version of every crate.