Git pull over https to avoid host key checking

Signed-off-by: Ben Agricola <bagricola@squiz.co.uk>