Replace download of spender-gpg-key.asc with a regular recv-key import.

HTTPS isn't that secure because it has a single point of failure. The less HTTPS servers the user has to rely on the better. This takes away the need to trust that requests to https://grsecurity.net are not compromised.