audit: check for the use of Dir["*"]

It's nicer to instead specify individual files so version bumps don't
start installing random stuff we don't want.