[QuentinFuxa]

Stacked on #472; only the last commit is new here.

Dependabot's uv updates have failed almost every run since September. All 22 errors in the latest run are private_source_authentication_failure on the GitHub release URL of the vllm-metal==0.2.0 wheel, which [tool.uv].override-dependencies pinned. Because of that, no uv security update has been opened since mid-September, and the advisories behind #472 accumulated.

vllm-metal is only published through GitHub releases, Homebrew and its own installer (PyPI still has 0.1.0). The qwen3-vllm-metal extra already required that installer for the CPU vLLM runtime, which was never in the lock. So this change:

• makes qwen3-vllm-metal install qwen3-asr-causal and MLX only, instead of qwen3-asr-causal[metal];
• removes the override, so the lock no longer contains a direct URL (only PyPI, the two PyTorch indexes and the editable submodule);
• updates the README install row: install vllm-metal with its official installer, activate ~/.venv-vllm-metal, then install the extra into it. Pip users were already in that situation, since the override only applied to uv;
• records the change in docs/dependency-audit.md.

The lock drops vllm-metal 0.2.0 and the packages only it pulled (mlx-audio, mlx-vlm, miniaudio, nanobind, opencv-python).

Validation

• uv lock --no-cache --refresh -P certifi succeeds without fetching any vllm-metal URL, and the submodule's retired nightly URL (now 404) is not fetched either. Lock unchanged afterwards.
• uv lock --check with uv 0.10.
• uv sync --frozen --extra qwen3-vllm-metal --dry-run on macOS arm64 resolves (qwen3-asr-causal editable, MLX 0.31.2).
• Regression suite in an environment synced from the lock: 339 passed, 17 skipped. ruff check whisperlivekit tests passes.
• Not validated: a real vllm-metal stream (needs the upstream installer environment). Dependabot itself can only be confirmed on its next scheduled run after merge.