(Maint) Pin windows gems to match what we ship

The win32-dir gem has a dependency on ffi, which was recently updated to
1.9.3 but does not provide a precompiled version. As a result, the gem will
attempt to compile native extensions, which will fail on our spec boxes
(since the dev kit is purposefully not installed).

This commit pins ffi to 1.9.0, updates win32-dir and windows-pr to the
version that we ship with, and pins each gem to an exact version matching:

https://github.com/puppetlabs/puppet-win32-ruby/tree/1.9.3/ruby/lib/ruby/gems/1.9.1/gems
(Maint) Unpend tests for certs on windows

The recent changes to how locks are handled made these previously
failing tests start working on windows!
(Maint) Properly mark test as unsuitable for windows

fork() doesn't exist on windows. I had tried to confine the test to not
run there, but did it wrong. This should fix it.
Merge remote-tracking branch 'upstream/stable'

* upstream/stable:
  (Maint) Pin windows gems to match what we ship