Bump gems periodically with GitHub Actions

[jglovier]

To keep gems up to date and avoid security vulnerabilities, setup a GitHub Action to bump gems periodically.

Here's a project that might be a good solution (nope, that's for bumping your gems to a published package manager, not the gems in your project), but I'd like to try to see if I can configure it on my own first for sake of learning.