But preserve reproducibility by including a Gemfile.lock, preventing
dependencies from being bumped at build time without code changes.

Add a docker-bundle script to allow users to run bundle install/update
without having to fix up any local Ruby environment, which makes sense
is this repo whose only dependency is currently Docker.