chore(deps): update core handwritten gems lockfiles (strictly .lock only)

[torreypayne]

This pull request demonstrates the strictly .lock-only updates generated by Renovate across Phase 1 on top of our matchDatasources config fix without modifying any Gemfile constraints.

[torreypayne]

@aandreassa I was finally able to limit the Renovate updates strictly to lockfiles through PR #34759 ; once that PR is merged, Renovate will generate PRs like this one (#34770). I generated this PR locally via:

docker run --rm \
  -e LOG_LEVEL=info \
  -e RENOVATE_TOKEN="$(gh auth token)" \
  -e GITHUB_COM_TOKEN="$(gh auth token)" \
  -e RENOVATE_BASE_BRANCHES='["chore/restrict-renovate-lockfiles-only"]' \
  -e RENOVATE_BRANCH_PREFIX="tl-renovate-test/" \
  renovate/renovate:full \
  renovate --platform=github --schedule="" --enabled-managers=bundler --pr-hourly-limit=0 --pr-concurrent-limit=0 --commit-hourly-limit=0 googleapis/google-cloud-ruby