(RT 2490) HTTPS on bug-attachment.wikimedia.org

http://bug-attachment.wikimedia.org/attachment.cgi?id=2076 Just Works.
https://bug-attachment.wikimedia.org/attachment.cgi?id=2076 redirects:

 $ curl -vsL https://bug-attachment.wikimedia.org/attachment.cgi?id=2076 \
        2>&1 >/dev/null | egrep -e '^< Location: ' -e '^< HTTP/1'
 < HTTP/1.1 302 Found
 < Location: https://bugzilla.wikimedia.org/attachment.cgi?id=2076
 < HTTP/1.1 302 Found
 < Location: http://bug-attachment.wikimedia.org/attachment.cgi?id=2076
 < HTTP/1.1 200 OK

They should either both work or we should force HTTPS.
(In this case we're forcing HTTP.)

Change-Id: Iccb6993bd7c3fad31933069b59c5c02a6c81cca8
Merge "(RT 2490) HTTPS on bug-attachment.wikimedia.org" into production