Ruby dependencies

Adds a `Gemfile` for Sass. If we're going to keep PHP and Node dependencies locked, it makes sense to lock the Ruby dependencies, too.