Add .ico to the list of secure file extensions

At <https://chaosdorf.de/>, we have an apple-touch-icon and "shortcut icon" and noticed that only the touchicon (.png) is changed to HTTPS, not the shortcut icon which ends in .ico, causing an HTTPS mixed content warning.

This patch should fix that.