Add SimpleCov into the mix to get C0 coverage stats.

Plug in SimpleCov, as even the minimal guarantees provided by C0 coverage can prove handy for a security-related tool.
How about let's just make bundler-audit >= 1.9.1 and omit any version checks.