cf-release

allow uaa's "login.setnew" feature to be enabled from the manifest:

ignore Gemfile.lock so we don't accidentally commit it while we can't commit it

Don't include gemfile.lock until bosh puts out a final release that won't go away in a week

Bump src/dea_next:

Bump src/health_manager_next: