fix(media): define schema for media urls

should use https urls when configured