Backport PR #4903: use https for all embeds

YouTube, Vimeo, Scribd

I can't think of a reason not to, and http embeds won't work on https pages.