fix(deps): hard-pin angular 1.2.5

Since AngularJS now does regular pre-releases and we don't want to pick up
unstable builds, we should pin the latest stable version instead of relying on
the tilde specifier.
Merge pull request #511 from passy/angular-pin

How should we handle AngularJS pre-releases?