set gh to prefer https

more convenient when public vs push permissions may change in the
future, dont have to monkey around with ever chaning remote url.

still prefer extra security of SSH keychecking for deployment, but this
only applies to gh clone anyhow, so it works.