[issue-544] - Add filename and line number to CVE warnings in report

This adds ```:file``` and ```:line``` keys in the warning hash for warnings relating to libraries (Gemfile/Gemfile.lock).

Some notes:
* In testing, I had to regenerate the ```:fingerprint``` as it was generated using a different ```relative_path``` and as such didn't match in the tests. (e.g. ```Gemfile``` vs ```Gemfile.lock```).

@presidentbeef, hopefully this addresses the changes we wanted relating to #544. :chicken: 
Not sure about setting the Rails version to `>=0.0.0`. I believe some code may expect it to be `nil` or only contain digits. This will definitely change some reports from having an "Unknown" version number to ">=0.0.0". Admittedly rare, but it is a change in behavior.