[WIP] Initial pass at `bosco audit`

This checks against the http endpoint for the node-security project.
It scans the package.json of every repo in bosco and displays an
advisory if a package has dependencies which have known security
implications.

**Note**: this is currently working but has not got any documentation yet so don't merge.