Smart gemfile lock detection

if we detect a Gemfile.lock then we should use --deployment so we don't check with RubyGems, and we make sure the bundle is not updated by accident.