using world-readable git URL

The original URL was R+W, so fails for those without commit rights.