Audit any GitHub repo's supply chain risk with one API call

New endpoint: POST /api/audit/github → fetches package.json from any GitHub repo, returns a risk table. Found husky (24.6M/wk, 1 maintainer) = CRITICAL in vercel/ai.