Drop pip-audit --strict so releases stop failing on their own unpublished version