deployment requires `Gemfile.lock': add it.