Detecting Adversarial Fine-tuning with Auditing Agents