Update the bundle.

This includes a Rails update which fixes several CVEs, but also a
pretty substantial updates to CiteProc and Foundation.