link to a specific 1.2 version of foreman

This is safer than "latest" or "nightly".
rdo trunk can link to nightly in all cases.

Also disable gpgcheck on the plugins repos,
as those packages are not signed at present.