README: use `https` where possible

Seems like the readme was forgotten with https://github.com/h5bp/html5-boilerplate/commit/32c0b2b16034c66e6a72c6eeeded36ed7aa20081, so...