Update to gosu 1.2 (including GPG verification)

Fixes #16