Bundle update to fix HPT-167 bug

The search facet removal bug, as tested in spec/controllers/catalog_controller_spec.rb:42, is fixed.

Blacklight 4.7.0 still has the bug (fixed in release-4.7 branch) that passing an empty "f" parameter to search produces this error:
undefined method `each_pair' for "":String
But the Remove constraint link no longer passes an empty "f" parameter.

Note that this update does introduce deprecation warnings (for Blacklight 5.x) on the content of app/views/layouts/blacklight.html.erb.