Bump to upstream version 4.2.0
- Use Sourceforge's downloads.* subdomain instead, let SF figure out
the mirror/CDN redirection...
- I'm adding my tweaked AppStream metainfo file until it gets merged
upstream, in the next release.
- And the upstream switched from detached signatures to GPG-signed
checksums.