fix bcrypt CVE-2026-33306: update to 3.1.22

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: dadachi

Gemfile.lock

@@ -98,7 +98,7 @@ GEM
       activesupport
     ast (2.4.3)
     base64 (0.3.0)
-    bcrypt (3.1.21)
+    bcrypt (3.1.22)
     better_html (2.2.0)
       actionview (>= 7.0)
       activesupport (>= 7.0)