test against appbundle'd gems

appbundler has a convenient gemfile.lock that corresponds to all of
the pinned gem versions we will actually run against, so use it.