Add bundle-audit to CI once we update the dependencies

[tom93]

We should add bundle-audit check --update to the "lint" CI job (as per the GitHub Actions Ruby on Rails CI template).
Right now it doesn't make sense because there are too many issues.