submodules: use github https URLs