Enforce "No gems fetched from git repositories" policy with a custom cop

Description

See https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/8818 for the policy (now explicitly documented.)

Proposal

Create a custom Rubocop cop to enforce the policy.