Prefer HTTPS urls where available, especially for resolvers!

SBT 0.13.6 defaults to HTTPS for Maven Central, so the bar for
reasonable security has been nudged upwards.
Merge branch 'prefer-https' of github.com:rtyley/sbt-heroku into rtyley-prefer-https
Merge branch 'rtyley-prefer-https'