changed manifest permissions URL to the gh-pages domain

Static content is served from the gh-pages branch which has a different domain.