Update for CVE-2013-4164

https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164/
Update README and build-packages to use new fpm-cook syntax

fpm-cook now needs an explicit 'package' subcommand