README: Use `https` where possible