Update boxen.gemspec

Now that User-Agent is mandatory, boxen depends upon librarian-puppet 0.9.9.

https://github.com/rodjek/librarian-puppet/pull/95