apply review: move bundler-audit gem into <development, test group>