dist/pull: try to switch repos to use HTTPS