Lock gem dependencies

Just standard/better practice to lock your dependencies on the minor version since the app is clearly sensitive to changes on them.

Also stop ignoring `Gemfile.lock` both in the gem itself (to make sure we're all developing against the same version, this won't change any dependencies on the actual gem) and in the template (to make sure users have their dependencies resolved to a known state).