fix(deps): resolve dependabot alert 170 for rollup path traversal

Upgrade @stoplight/spectral-ruleset-bundler 1.6.3 → 1.7.0, which pins
rollup ~2.80.0 and clears GHSA-mw96-cpmx-2vgc / CVE-2026-27606 (arbitrary
file write via path traversal in rollup < 2.80.0).

The previous version-keyed override for bundler 1.6.x was not being
applied, so replace it with a direct bundler pin.

Signed-off-by: Matthew Bain <66839492+rocketstack-matt@users.noreply.github.com>

Author: rocketstack-matt

package-lock.json

@@ -85,9 +85,7 @@
             "npm": "11.12.1"
         },
         "serialize-javascript": "^7.0.5",
-        "@stoplight/spectral-ruleset-bundler@1.6.x": {
-            "rollup": "2.80.0"
-        },
+        "@stoplight/spectral-ruleset-bundler": "1.7.0",
         "eslint": {
             "minimatch": "^3.1.4"
         },