Update dependencies and Ruby version

[zfletch]

This PR is comes out of the discussion in https://github.com/alpheios-project/arethusa-configs/pull/75

It has three parts:

• Update Ruby version
• Add bundler-audit (so we don't need to wait for dependabot's PRs to find a vulnerability)
• Update dependencies (solving the original issue)