Add AlmostNoSecurity to trust-policy and fix doc links to Rubygems.