Run cargo-audit in CI

[psiinon]

This project does not appear to be using cargo-audit (https://github.com/RustSec/cargo-audit) - that’s strongly recommended in order to be warned about dependencies with security vulnerabilities.

[pjenvey]

This is blocked on an update to the rust-toolchain (cargo audit doesn't run on our old nightly)