Pin RuboCop

RuboCop will continue to evolve and add new or fix old cops.

Having CI fail because of this is annoying. Since there is no version constraint and the lockfile isn't commit the local version easily gets out of date if you forget about it. This allows you to upgrade rubocop at your own pace when you actually feel like doing that.