⬆️ Update brakeman to 8.0.6

bin/brakeman passes --ensure-latest, which exits 5 without scanning whenever the gem is behind — the actual reason scan_ruby has failed in CI since March.