CI: poetry audit fails due to broken safety 3.8.x import

[jeff-schnitter]

Body:

Problem

The poetry audit step in both test-pr.yml and test-daily.yml fails with:

cannot import name 'build_client_session' from 'safety.auth'

This is caused by safety 3.8.x shipping a broken import. The poetry-audit-plugin depends on safety>=3.0.0,<4.0.0, so pip resolves to the latest broken version.

Fix

Pin safety<3.8.0 in the workflow install step to use the last working version.

References

• Failed run: https://github.com/cortexapps/cli/actions/runs/26768876409
• Fix branch: fix-poetry-audit-safety