include a simple example application
use `gem build` over `rake package`
disable yaml media type after cve-2013-0156:

Although the YAML media type was enabled, it would not necessarily have
introduced a vulnerability.  You would have had to accept application/yaml or
accepted it as a subtype, i.e. `application/vnd.myapi.user+yaml`.