Run brakeman automatically in travis

As we're already including brakeman in our gem bundle, it'd be nice
to actually run it automatically.

When we're green w/ the vulnerabilities, we can turn on the -z option
and let the build fail on new ones.
Merge pull request #1071 from bkutil/add_brakeman_to_travis

Run brakeman automatically in travis