Add Gemfile.lock and make cache dependent on it

This pins the versions used to build this gem and avoids floating dependencies as we saw when rb_sys was updated.

We made a similar change in gitlab-glfm-markdown!87 (merged).