provision.sh: use .netrc trick to workaround certain proxies

git clone https://... on a certain proxies mistakenly ask for a github
user/pass combo, while meaning to ask for proxy user pass (despite
having defined it everywhere already)