ci: add security scanning

[okwn]

Summary

Adds security scanning to CI.

Testing

CI passes.

---

Summary by cubic

Adds a CI job that runs pip-audit with poetry to scan Python dependencies for known vulnerabilities. Also adds the MIT license and fixes a minor import sort to satisfy ruff.

• New Features

  • New security job in .github/workflows/ci.yml that sets up Python 3.9, installs deps with poetry 1.5.1, and runs pip-audit ..

• Dependencies

  • Adds pip-audit to pyproject.toml.

^{Written for commit c9a2656. Summary will update on new commits. Review in cubic}

[cubic-dev-ai]

No issues found across 5 files

_{Re-trigger cubic}