Add `cargo audit` flake check

Such that `nix flake check` will automatically run `cargo audit` and fail on serious vulnerabilities.

This can be implemented rather easily using `crane`'s function:

https://crane.dev/API.html?highlight=cargoAudit#cranelibcargoaudit