Move bundler-audit to :development, :test group