Add a -f option to 'pkg audit': use a local file as the vuln.xml
database.

Fixes #757 in master.  Will be in release 1.3.0