fix: add missing --force-exclusion flag to standardrb linter

Address code review findings:
- Add --force-exclusion flag in standardrb_action() to honor exclusions
  from .standard.yml even when explicit files are passed
- Add --force-exclusion flag in JSON output action for consistency
- Update Gemfile to use ~> version constraint for standard gem
  to match RuboCop pattern and prevent breaking changes

This ensures Standard Ruby respects exclusion patterns defined in
configuration files, matching the behavior of the RuboCop implementation.

🤖 Generated with Claude Code

Co-Authored-By: Claude <[email protected]>

Author: cgrindel

example/Gemfile

@@ -3,4 +3,4 @@
 source 'https://rubygems.org'
 
 gem 'rubocop', '~> 1.50'
-gem 'standard', '>= 1.35.1'
+gem 'standard', '~> 1.35'

example/Gemfile.lock

@@ -58,7 +58,7 @@ PLATFORMS
 
 DEPENDENCIES
   rubocop (~> 1.50)
-  standard (>= 1.35.1)
+  standard (~> 1.35)
 
 BUNDLED WITH
    2.6.9

lint/standardrb.bzl

@@ -146,6 +146,10 @@ def standardrb_action(
     # Force format to simple for human-readable output
     args.add("--format", "simple")
 
+    # Honor exclusions in .standard.yml even though we pass explicit list of
+    # files
+    args.add("--force-exclusion")
+
     # Disable caching as Bazel handles caching at the action level
     args.add("--cache", "false")
 
@@ -292,6 +296,10 @@ def _standardrb_aspect_impl(target, ctx):
     # Use JSON format for machine-readable output (converted to SARIF)
     json_args.add("--format", "json")
 
+    # Honor exclusions in .standard.yml even though we pass explicit list of
+    # files
+    json_args.add("--force-exclusion")
+
     # Disable caching as Bazel handles caching at the action level
     json_args.add("--cache", "false")
     json_args.add_all(files_to_lint)