I erroneously removed the explicit rails-observer dep in #14434, but the sweeper functionality used by TopbarSweeper is provided by the rails-observer gem, so the dependency should be restored. (At least while TopbarSweeper exists; I think the remainder of the token refactoring in #14434 remains beneficial.)

Currently rails-observer is installed as a dependency of the audited gem, so it does still work.