Update 404.md.

* use the `site.url` variable
* remove `type="text/javascript"` since it's the default for `script`
* use the protocol relative URL for the 404 widget script
* use double quotes for consistency