add cargo-audit to the devshell
Apparently github actions VMs ship with it and that's how it was working before? Cursed. We should control our own supply chain and also ensure that local development uses the same version as CI.
This commit is contained in: