Empty TODO files were removed.

See https://docs.gitlab.com/ee/development/rubocop_development_guide.html#cop-grace-period

Changelog: other

This commit removes excludes from RuboCop TODOs and rspec_order_todo.yml
for removed/non-existent files.

Fix rubocop offenses

* Regenerate bundler-checksum
* Take latest RuboCop and RuboCop RSpec versions
* Disable RSpec/FactoryBot/CreateList cop rule in data usage spec
* Regenerate TODOs for RSpec/ExpectChange and Security/IoMethods
* Remove TODOs for disabled RSpec/Predicate

The configuration of RSpec/ExpectChange was changed. See
https://gitlab.com/gitlab-org/ruby/gems/gitlab-styles/-/merge_requests/127

Security/IoMethods was added.

The use of URI.open is a serious security risk.

Solution reference from:
rubydoc.info/gems/rubocop/RuboCop/Cop/Security/Open

This commit runs two commands:

1. `bundle exec haml-lint --auto-gen-config` to update haml-lint
   offenses (most of these are easily fixed).

2. `bundle exec rake rubocop:todo:generate[...]` with the output of
   `bundle exec rubocop --format offenses` to update todo files of
   existing offenses with existing cops (this is due to cop changes
   since we last upgraded RuboCop).

   To somewhat automate this, we can run:

       cops = $(
           bundle exec rubocop --parallel --format offenses |
               grep '[a-z]/' |
               awk '{ print $2 }' |
               sed ':a; N; $!ba; s/\n/,/g'
            )

       bundle exec rake rubocop:todo:generate[$cops]