Add pip audit to ci/cd

It was previously there but in a way that was prohibitively slow — I think because the docker container was installing pip audit each time (?).