use HTTPS for CDN assets in docs

This avoids security warnings and makes `file://`-viewing less broken.