Auditing $f$-Differential Privacy in One Run