Use HTTPS URLs for submodules