Add .ruby-version, fix psych security vulnerability