Merge pull request rails#50577 from andyw8/andyw8/move-to-dev-test-group

Ensure RuboCop and Brakeman are always avaiable in CI

Author: rafaelfranca

railties/lib/rails/generators/rails/app/templates/Gemfile.tt

@@ -36,10 +36,6 @@ gem "bootsnap", require: false
 group :development, :test do
   # See https://guides.rubyonrails.org/debugging_rails_applications.html#debugging-with-the-debug-gem
   gem "debug", platforms: %i[ mri <%= bundler_windows_platforms %> ]
-end
-<% end -%>
-
-group :development do
 <%- unless options.skip_brakeman? -%>
   # Static analysis for security vulnerabilities [https://brakemanscanner.org/]
   gem "brakeman", require: false
@@ -50,6 +46,10 @@ group :development do
   gem "rubocop-rails-omakase", require: false
 
 <%- end -%>
+end
+<% end -%>
+
+group :development do
 <%- unless options.api? || options.skip_dev_gems? -%>
   # Use console on exceptions pages [https://github.com/rails/web-console]
   gem "web-console"