YoutubeOnebox: FIX HTTP-specific URLs

This replaces them with protocol-agnostic URLs, for example `//youtube.com/watch?v=...`

Fixes the mixed-content warning for secure instances of discourse, at least for Youtube.