Use HTTPS URLs where possible

This avoids the mixed content warnings on `https://darobin.github.io/formic/specs/json/`.