Audit in CI

[vbrandl]

Run cargo audit every time the dependencies change, also every night at 01:00 and on PRs

• on Cargo.toml or Cargo.lock change (see Action is not executed actions-rs/audit-check#30 for why this did not work)
• on PR
• scheduled (only runs, if the CI config is on the default branch)