Add Brakeman

This adds [brakeman](http://brakemanscanner.org/) and runs it with the tests. A warning is considered a failure.