Fix URL for new-hackage mirror source

Tested against hackage.haskell.org and beta.hackage.haskell.org.