Explicitly include psych to leverage the libyaml security patch without relying on the version in the ruby standard library

https://www.ruby-lang.org/en/news/2014/03/29/heap-overflow-in-yaml-uri-escape-parsing-cve-2014-2525/