- Updated the Servicepack framework from v1.9.1 to v1.9.2, which drops the
  framework's `make audit` target in favor of `make sec`.

- Removed the redundant `make audit` target. `make sec` already runs
  `govulncheck` (alongside semgrep, merged into `sec.sarif`), so a separate
  vulnerability-only target duplicated that coverage. Run `make sec` instead.