upgrade to boxen 2.5.0

This steals the Gemfile from upstream, because we've not upgraded ours
when we've upgraded Puppet. This will use the newer versions of all the
dependencies too.