False-negative audits via stale option parsing

Improper input validation in MidnightBSD Mport before 2.7.8 allows local users to miss vulnerable packages during audit. In mport/mport.c, the audit path computes option-adjusted arguments but passes the original argv entry to audit_package(), so an option token such as -r is audited instead of the requested package. The failure requires an audit invocation with an option before a package name and can produce a false-negative or useless result while leaving the package unidentified.