Do not require bundler-audit in Gemfile

Move `bundler-audit` to the `development` gem group only.