Add Gemfile.lock

Gemnasium seems to only follow rubygems.org and ignores `source`
definitions in Gemfile. So add the lockfile to the repo to help tracking
the Fusion plugin locally.
Add note about Gemnasium not tracking VMware plugins