CanUpgrade returns true if there's a newer version string published on the server
this needs to manually bump latest version for every platform in the
downloads server.
at the moment, we hardcode RiseupVPN in the path, assuming that all clients
stay in sync.