fix CI more

.gitea/workflows/security.yml

@@ -25,12 +25,7 @@ jobs:
         run: uv python install 3.11
 
       - name: Install dependencies
-        run: uv sync
-
-      - name: Add security tools
-        run: |
-          uv add bandit[toml]
-          uv add safety
+        run: uv sync --extra security
 
       - name: Run bandit security linter
         run: uv run bandit -r src/ -f json -o bandit-report.json
@@ -64,8 +59,7 @@ jobs:
 
       - name: Check for dependency vulnerabilities
         run: |
-          uv sync
-          uv add pip-audit
+          uv sync --extra security
           uv run pip-audit --format=json --output=pip-audit-report.json
         continue-on-error: true