Fix ci settings

There were two problems causing failures.

1. The keychain password change somehow.  It was fixed out-of-band.  I believe the problem was caused by Jenkins being started with the jenkins user vs. root. o_O
2. There was a typo in the Gemfile.masters and Gemfile.develop for the run-loop repo.

I took the opportunity to extract the keychain lock/unlock to a script and ensured that the keychain was unlocked before signing the reveal library. 

I also adjusted the PATH variable for the job script - the global PATH was not being applied; possibly because the Jenkins restart was done by jenkins?