Add Gemfile.lock so we can install vendored gems

This should be able to go back to only a gemspec once the dependencies
in the Gemfile are available on Rubygems

[#52428137]