Bump mimimum puma and Rails versions
Bump mimimum puma and Rails versions

This forces users of Publify to upgrade to a version of puma and rails
where CVE-2022-23633 has been fixed.

Before this patch lands, users can already upgrade puma and rails
independently.

publify/publify,publify/publify,publify/publify