pip-audit should probably identify itself when making HTTP requests, to aid in downstream debugging. h/t @Andrew