Use RubyGems sources over HTTPS

The source :rubygems is deprecated because HTTP requests are insecure.
Add Gemfile.lock to .gitignore

It is a bad practice to keep the lock file in version control when
developing a gem because there is no functionality that enforces it when
installing with the gem command.
Move rspec_org_formatter from the Gemfile