Backport fix for CVE-2014-3482

Also adds a test to ensure SQL injection is not possible via range
queries (Rails 3.0 is not affected, was CVE-2014-3483 for 4.x)
AssetTagHelperTest: Fix microseconds issues on Ruby 1.9
Update to Rails LTS 3.0.20.4
Improve release workflow
Release Rails LTS 3.0.20.4
Improve community release process