Use simple lockfile parser instead of loading/installing the whole gemfile

Allows for static analysis e.g. just curl down a file and test it