Use bundler's gem checksum verification

Mitigates installing compromised/hijacked gems:

https://bundler.io/blog/2024/12/19/bundler-v2-6.html
https://mensfeld.pl/2025/01/the-silent-guardian-why-bundler-checksums-are-a-game-changer-for-your-applications/