fix command_api_spec when SimpleCov isn't installed

  also workaround this warning:

    command_api_spec.rb:35: warning: already initialized constant RULES
require bacon 1.2.0 because 1.1.0 stopped working with new tests
pass the pubkey needed to sign along with the sig_hash