Remove RuboCop TODO suppressions

- Make local cops enforceable without broad TODO-style config skips.
- Rename `utils/gems` since Bundler reserves `gems.rb`.
- Keep RSpec helpers as `def` so Sorbet can see them.
- Explain why host OS checks stay legal in selected paths.