Run brakeman automatically in travis

As we're already including brakeman in our gem bundle, it'd be nice
to actually run it automatically.

When we're green w/ the vulnerabilities, we can turn on the -z option
and let the build fail on new ones.