Refresh vulnerable Ruby dependencies

[ryanduguid]

Summary

• refresh the committed bundle with Bundler 2.5.11
• move Faraday to 2.14.3, concurrent-ruby to 1.3.8, Active Support to 8.1.3.1 and URI to 1.1.1
• clear the patched ranges behind all 11 current Dependabot alerts once merged

Validation

• Bundler 2.5.11 resolved and wrote the lockfile successfully
• static lock inspection confirms all four packages are above their current patched-version floors
• git diff --check

The full bundle and RSpec suite could not run locally because this portable Windows Ruby lacks MSYS2/native gem build support. The PR remains draft pending hosted dependency installation, bundle exec bundler-audit check and RSpec.