Use local fonts rather than assets.decoded.co ones to prevent CORS issues

[SomeHats]

Could potentially cause some issues on other projects, so this probably warrants something more significant than a patch version number change...