Add Ruby on Rails SQL injection (Active Record) advisory

Please double check! Hope it makes sense to split the OSVDB files including different versions.
Whelp, <= 3.1 no longer gets security patches, and bundler only became a thing well into 2.1?, so you've got bigger problems ;). I think it's okay to not guess re: < 2.0.0.