Fix auto update by using GitHub api
- Remove unnecessary 'legal' files (not required if not embedding files in package)
- Re-enable checksums (otherwise this package will likely have its 'trusted' setting removed
Note: You can use a GitHub token to authenticate with the GitHub API by setting github_api_key
Implements #1 (closed) and fixes #3 (closed)