Update boxen.gemspec

Now that User-Agent is mandatory, boxen depends upon librarian-puppet 0.9.9.

https://github.com/rodjek/librarian-puppet/pull/95
Merge pull request #81 from wallace/master

Updates boxen dependencies due to new Github API requirements for User-Agent