Use simple lockfile parser instead of loading/installing the whole gemfile

Allows for static analysis e.g. just curl down a file and test it
also brings back the unit test removed in #6 
(depends on #6 and #7)