ci(cargo-deny): add dependency audit with cargo-deny (#2677)