CI: don't compile `cargo-audit` every time

CI spends a few minutes doing cargo install cargo-audit, which seems silly: we could just copy the compiled binary and store it somewhere, and then download that instead of actually recompiling the binary every time.