Adding Brakeman static analyzer.
This is meant to be deployed as gem, so ignore Gemfile.lock.