add test requirements

[emphasize]

• added test requirements to keep them out of the workflows
• reverted the duplicated codecov and fixed the existing (wrong source)
• codecov bage
• upped audit version
• ignored setuptools vulnerability

[codecov]

Codecov Report

❗ No coverage uploaded for pull request base (dev@bcdec9d). Click here to learn what that means.
The diff coverage is n/a.

@@          Coverage Diff           @@
##             dev      #37   +/-   ##
======================================
  Coverage       ?   29.57%           
======================================
  Files          ?        9           
  Lines          ?     1055           
  Branches       ?        0           
======================================
  Hits           ?      312           
  Misses         ?      743           
  Partials       ?        0           

Flag	Coverage Δ
unittests	29.57% <0.00%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

[emphasize]

@JarbasAl Is this directory structure requirements/... in conflict with OSM?
If so, can we add the alternate location there?