(see T127390: Meet with Security and Ops about a long-term productionization plan for background)

The long-term productionization plan for this project will require a security review of all application dependencies. We should compile a list of gems (start with bundle list) and mark which ones can be satisfied from Debian jessie packages, and also which require native compilation and dev packages to be installed. The eventual goal of this work is to satisfy everything we can from system packages.