use boxen::config::repohost instead of github.com when cloning

depends on boxen/boxen#58.

@mdelagralfo mentioned wanting full control of the clone url. i'd like that too (a SSH clone url would be preferable in my organization), his PR might be preferable to this one.

/cc @wfarr