use a thread pool

do not ddos rubygems with versions.size threads:

limit threads to 20 concurrent requests made at a time.

also, udpate spec download number to what's in reality (spec/fixtures removed so in need of update).
TODO: longer term FIXME do not use that number in the specs.