broken pipeline due to `pip-audit`

output:

```text
Found 2 known vulnerabilities, ignored 1 in 1 package
Name    Version ID                  Fix Versions
------- ------- ------------------- ------------
urllib3 2.2.3   GHSA-48p4-8xcf-vxj5 2.5.0
urllib3 2.2.3   GHSA-pq67-6m6q-mj2v 2.5.0
```

we can ignore these in `tox.ini` to "fix" the pipeline — they do not seem relevant to the project