sorbet: Update RBI files and prune files.yaml.

Autogenerated by [a scheduled GitHub Action](https://github.com/Homebrew/brew/blob/master/.github/workflows/sorbet.yml).

Add `dependabot.yml`.

cask/audit.rb: minor cleanup

audit: allowlist some formulae homepage cert issues

dev-cmd/pull: recommend gh over hub.

`gh` is the official GitHub tool and better maintained at this point.

dev-cmd/pr-pull: refactor and add tests

dev-cmd/typecheck: Group all automatic updates code into one \`--ci\` switch

- This uses the `--update` switch to do both RBI file updates and pruning of
  deleted files from `sorbet/files.yaml`. The assumption is that only
  this automated task will run this command.

- This was suggested in https://github.com/Homebrew/brew/pull/8741#discussion_r490949486.

sorbet: update RBI files using Tapioca.

build(deps): bump regexp_parser from 1.7.1 to 1.8.0 in /Library/Homebrew

Bumps [regexp_parser](https://github.com/ammar/regexp_parser) from 1.7.1 to 1.8.0.
- [Release notes](https://github.com/ammar/regexp_parser/releases)
- [Changelog](https://github.com/ammar/regexp_parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ammar/regexp_parser/compare/v1.7.1...v1.8.0

)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Autogenerated by [a scheduled GitHub Action](https://github.com/Homebrew/brew/blob/master/.github/workflows/tapioca.yml).

unpack_strategy/dmg: remove deprecated IDME attach flag

diagnostic: fix xattr check

Python emits the version on either stderr or stdout based on major
version, so just to be safe let's use popen_read and combine the
output streams.

Check for descriptions starting with “the”.

docs: update for autosquashing

Update vendored Gems.

chmod recursively to satisfy zsh "insecure directories" warning

Add homebrew/cask to new maintainer checklist.

Fix some typechecking errors.

Allow “macOS virtual machines” in descriptions.