docs: fix non-https badge