Move hyphens to front of character class

[Cldfire]

According to the spec, hyphens are only valid at the very beginning of a character class:

The dash character (-) is reserved as a special character. To list '-' as a literal character it must appear immediately after the opening square bracket '['.

Our parser over at @1Password caught a couple rules in the list that have the - in non-valid places, so I moved them to the start of the character class in this PR.

Overall Checklist

• I agree to the project's Developer Certificate of Origin
• The top-level JSON objects are sorted alphabetically
• There are no open pull requests for the same update

[hober]

Looks good to me.

[rmondello]

Thanks @Cldfire! I’m still working on getting us some automation that’ll check this. (I know it’s been a while. The problems are non-technical.)