Previously uscan would download the github-generated source tarball
which is missing the version.c file. This file is created by `make
dist`, so with this change we update debian/watch to refer to the
tarballs created by `make dist` so uscan downloads the correct tarball
that contains version.c.

This script is only useful on master and seemingly breaks gbp, so we're removing
it from the debian branch now.

That script absolutely works from a release tarball.

Make it run at 60fps by default now, no longer 112fps when dithering.

Code file copyright headers have it too, so only listing the persons in
debian/copyright is inconsistent.

Fix the displaymarker sometimes only moving by one character when starting from column zero (empty PW).

Without this, an attacker might infer the password length based on a
screenshot and the time of day, as rand() is a deterministic PRNG without
any runtime entropy sources.

After this change, the attacker will additionally need the exact
microsecond-accurate time of day, and the process ID.

We may alternatively move to using /dev/urandom or getrandom here, but this
does not seem worth the effort, given an attacker can learn the same info by
pointing a video camera at screen or keyboard, or a microphone at the keyboard.

Also stop accidentally including some .o files in the tarball; found in the
checking done by the script.

rpolzer prefers to be uploader, so mteich will stay maintainer.

- make rpolzer maintainer, mteich uploader to avoid NMUs.
- remove whitespace at EOL in changelog.
- make changelog entry fit the lintian limit of 80 characters.

lintian-overrides only contained an override for binary-without-manpage,
but xsecurelock ships a manpage since 794a8e00 so we don't need that
override anymore.