Vulnerability code will update gem requirement, broaden into an option.

[chrismo]

I think for our purposes internally, 'twould be good to add the requirements tweaking that the vulnerability code will do as an option to be applied to all gems_to_patch.

Prolly a separate ticket: consider option to feed specific versions from the command line, same as is read from advisories.